Skip to content

Fix Snyk vulnerability by adding license name to package.json #49

Description

@zmagauina-fn

Hi! My team is using this package and have certain security requirements, we're getting a Snyk vulnerability on this package because Snyk can't detect the license:

Unknown license: Snyk was not able to detect a license for this package. This is either because the license wasn't defined in the package file (i.e. package.json, pom.xml, etc.) or the license name found doesn't match anything in SPDX's License List.

This is a really simple fix, just adding "license": "MIT" to package.json.
@florrain can I make this change? I know there hasn't been a new version in years but this is a perfectly good package we'll have to replace otherwise.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions