Skip to content

Wrong license in package.json #153

@Joery-M

Description

@Joery-M

The license field of package.json is MIT, but Apache-2.0 is defined in the LICENSE file.
Now this usually wouldn't matter, since the licenses are similar (for the most part). But tools like pnpm-licenses partially misinterpret the license to be MIT.

I don't know how much of a legal issue this is, since I've found packages like through that use both. But it just seems like sloppy to me.

Example:

  1. Create a new npm project
  2. Install pnpm
  3. Run pnpm i @pkgjs/parseargs
  4. Run npx pnpm-licenses list -o ./licenses.json
  5. View the licenses.json file.

Result:

[
    {
        "name": "@pkgjs/parseargs",
        "license": "MIT", // Incorrect
        "author": "",
        "homepage": "https://github.com/pkgjs/parseargs#readme",
        "description": "Polyfill of future proposal for `util.parseArgs()`",
        "version": "0.11.0",
        "licenseText": "Apache License\n Version 2.0, January 2004... You get the idea" // Correct
    }
]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions