SPDX licenses list and validation library.

Fund package maintenance!

Installs: 28 353 197

Dependents: 19

Suggesters: 1

Security: 0

Stars: 1 157

Watchers: 6

Forks: 19

Open Issues: 0

1.5.3 2020-02-14 07:44 UTC

This package is auto-updated.

Last update: 2020-06-20 14:34:54 UTC


SPDX (Software Package Data Exchange) licenses list and validation library.

Originally written as part of composer/composer, now extracted and made available as a stand-alone library.

Build Status


Install the latest version with:

$ composer require composer/spdx-licenses

Basic Usage


use Composer\Spdx\SpdxLicenses;

$licenses = new SpdxLicenses();

// get a license by identifier

// get a license exception by identifier

// get a license identifier by name
$licenses->getIdentifierByName('MIT License');

// check if a license is OSI approved by identifier

// check if a license identifier is deprecated

// check if input is a valid SPDX license expression

Read the specifications to find out more about valid license expressions.


  • PHP 5.3.2 is required but using the latest version of PHP is highly recommended.


composer/spdx-licenses is licensed under the MIT License, see the LICENSE file for details.


License information is curated by SPDX. The data is pulled from the License List Data repository.