{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/4"}],"enrichment":{"capability":"Validates and tokenizes SPDX license expressions according to the SPDX v2.3 specification, parsing complex license combinations with operators like OR, AND, and WITH.","skillfed_tags":["license-compliance","spdx"],"use_cases":["Validate license expressions in SBOM (software bill of materials) files before processing or storing them.","Parse complex license combinations in dependency metadata to extract individual license identifiers for compliance audits.","Build license compliance tooling that needs to reject malformed or non-standard SPDX expressions early.","Tokenize license strings to feed into downstream license compatibility or risk analysis systems."],"what_it_does":"pyspdx is a small Python library that validates and tokenizes SPDX license expressions\u2014the standardized format for describing software licenses and their combinations. It exposes two functions: validate() checks whether a license expression conforms to the SPDX v2.3 specification and raises ValueError if it does not, while tokenize() breaks an expression into its constituent license identifiers. The library handles complex expressions with logical operators (OR, AND, WITH) and document references, relying on pyparsing for the underlying grammar implementation.\n\nThe package is useful for tools that need to parse or validate license metadata in software bills of materials, dependency manifests, or compliance workflows. It is dormant but recently maintained; however, its GPL-2.0-only copyleft license means it can only be used in projects that are themselves distributed under compatible copyleft terms.","worth_installing":"Yes, if your project is copyleft-licensed or can accommodate GPL-2.0-only. The package is lightweight, has no security vulnerabilities, and solves a specific problem (SPDX expression validation) with a minimal API. Dormant maintenance is acceptable for a narrow, stable utility. If your project is proprietary or permissively licensed, the copyleft license makes this a blocker."},"id":"pyspdx","links":{"html":"https://skillfed.io/packages/pyspdx","md":"https://skillfed.io/packages/pyspdx.md","pypi":"https://pypi.org/project/pyspdx/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2025-02-10","license_spdx":null,"license_treatment":"copyleft","name":"pyspdx","python_support":"supports_current","summary":"Validate SPDX expressions"},"popularity":{"monthly_downloads":95325,"position":13271,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.2.0"}