SPDX License Field Lint for package.json, pyproject.toml and Cargo.toml

Reads the licence field in the open manifest and names every deprecated SPDX id, invalid string, PEP 639 leftover and copyleft obligation - with the exact replacement text.

{ "name": "billing-service", "version": "2.4.0", "license": "GPL-3.0", "licenses": [{ "type": "MIT", "url": "https://example.com/LICENSE" }], "dependencies": { "left-pad": "1.3.0" } } # pyproject.toml license = {text = "Apache 2.0"} classifiers = [ "License :: OSI Approved :: MIT License", ] # Cargo.toml license = "MIT/Apache-2.0" # vendored manifests found in the repo "license": "Unlicense" "license": "SSPL-1.0" "license": "AGPL-3.0-or-later" "license": "BUSL-1.1" "license": "CC-BY-NC-4.0" "license": "MIT or Apache-2.0" "license": "BSD" "license": "" Check