npm package
Homespdx-expression-parse
spdx-expression-parse is a package for parsing SPDX license expression strings into structured ECMAScript objects. It is useful for applications that need to handle and audit software license information, particularly in open-source projects. This package is often utilized by tools that automate license audits.
- lurq health score
- 60/100
- Confidence
- proven
- Weekly downloads
- 39,068,373
- Latest version
- 5.0.0
- Last release
- Jul 16, 2026
- License
- MIT
Should you depend on spdx-expression-parse?
lurq's verdict: low
- No known advisories
Check this from your coding agent
This page is a daily snapshot. lurq's verify tool checks spdx-expression-parse at the exact version your agent is about to install, and compat checks it against the rest of your stack. One command connects Claude Code, Cursor, VS Code and other agents:
npx lurqrun
Free to start. Quickstart
Upgrading spdx-expression-parse
What each major version removed, renamed or re-signatured, from lurq's extraction of the published packages.
- 4.0.0 → 5.0.0diff ready
- 3.0.1 → 4.0.0diff ready
- 2.0.2 → 3.0.1diff ready
Scored from public signals (npm registry, GitHub, deps.dev and advisory databases). Data as of Sep 20, 2026; this page refreshes every 168 hours. Source repository.