Is there a way to set a package licensing as "private" or "all rights reserved". We use this on a project that has a mix of public and private packages to validate the licenses but on the private packages, we would like to be able to specify that the package is unlicensed and cannot be distributed.

NPM as added a similar option to their system and it would be really nice here.

Thanks

The SPDX License List 3.0 was released last week:

• https://lists.spdx.org/pipermail/spdx-tech/2017-December/003491.html
• https://spdx.org/licenses/

They're published in different formats (including JSON) at https://github.com/spdx/license-list-data

It's probably going to be more reliable in the long-term to parse these files instead of screen-scraping the HTML.

Please consider removing tests from .gitattributes.
This make downstream CI easier.
(really small)

See http://blog.remirepo.net/post/2014/08/12/Koschei-continuous-integration-of-PHP-stack-in-Fedora

• Update namespaces to Composer\Spdx or something
• Add README
• Add LICENSE with MIT
• Add composer.json
• Add phpunit.xml.dist, .travis.yml, and make sure tests run

Not sure if I am missing anything but I probably am :)

Has been removed from https://spdx.org/licenses/index.html

Oh crap, sorry that's what happens when you release late on Friday heh.. Good thing I saw this before heading to bed ;) Fixed now.

Originally posted by @Seldaek in composer/getcomposer.org#209 (comment)

Outdated to 1.3.0

I don't see any usage of JsonSchema namespace in the code.

See "phpcompatinfo ananyser:run src" report

Classes Analysis
Class                             Matches REF  EXT min/Max PHP min/Max PHP all 
Composer\Spdx\SpdxLicenses        2       user             5.3.0               
Composer\Spdx\SpdxLicensesUpdater         user             5.3.0               
DOMDocument                       2       dom  5.0.0       5.0.0               
DOMXPath                          2       dom  5.0.0       5.0.0               
InvalidArgumentException          2       spl  5.1.0       5.1.0               
RuntimeException                  1       spl  5.1.0       5.1.0               
self                              2       Core 5.0.0       5.0.0               
Total [7]                                                  5.3.0               

Ensuring that deps in vendor/ have a license compatible with the root project is a tough task.

Other projects exist in js/Rust/Ruby/etc. I computed the following list of interest:

• https://github.com/HansHammel/license-compatibility-checker/
• https://github.com/jpvillaisaza/licensor
• https://github.com/timelsass/wp-license-compatibility/
• https://github.com/Nemo157/cargo-lichking/blob/
• https://github.com/librariesio/license-compatibility/

Later on, we could build a composer plugin like this on top:

• https://github.com/codepunkt/webpack-license-plugin/

This could be a great contribution if anyone is up to learn about the topic and contribute a PR here, if the maintainers agree?

Help wanted.