spdx-satisfies is a lightweight JavaScript library for validating SPDX license expressions against license identifiers or a list of license identifiers. It determines whether a given license expression satisfies a set of required licenses, crucial for ensuring compliance in software projects. The library efficiently parses SPDX expressions, handles complex AND/OR conditions, and accurately assesses whether the expression meets the defined license requirements, aiding in dependency management and legal compliance.
The spdx-satisfies npm package had initial releases in July and August 2015, followed by infrequent releases. Version 4.0.0 came out in March 2018, followed by a minor update in December 2018. Version 5.0.0 was released in March 2019 and 5.0.1 in May 2021. The most recent release, version 6.0.0, was in January 2025.
spdx-satisfies npm package downloads show a general upward trend from March 2024 to July 2025. Starting around 2.8 million, downloads peaked at 4.6 million. August 2025 data is incomplete but currently indicates around 4 million downloads.
