You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: accepted/0028-npm-license.md
+7Lines changed: 7 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,6 +32,13 @@ Since this proposal moves `npm audit` into a wholistic auditing suite rather tha
32
32
-`--no-audit-security` should block **only security auditing**
33
33
-`--no-audit-license` should block **only license auditing**
34
34
35
+
On action if a module doesn't have a compatible license:
36
+
37
+
- the `npm audit fix` command *should* search for and implement a replacement if at all possible given the list of allowed/blocked licenses and semver ranges
38
+
- the `npm audit fix --force` command *should* search for and force a replacement if at all possible given the list of allowed/blocked licenses and semver ranges
39
+
- the `npm audit` command *should* report license failures and which versions would "fix" licenses that are blocked but have already been resolved.
40
+
- the audit report on `npm install` should report how many modules do not comply with license requirements
41
+
35
42
36
43
<!-- Old "Detailed Explanation" - saved for context while drafting.
37
44
- It should be possible to get a full report of the licenses from all dependencies.
0 commit comments