meesterdev/package-parser

Parse composer/npm package locks into a list of packages with some basic information.

1.1.1 2025-04-15 16:53 UTC

Requires

• php: >=8.1
• ext-json: *
• meesterdev/file-wrapper: ^1.0.0

Requires (Dev)

• phpunit/phpunit: ^9.5|^10|^11|^12

MIT

• Thomas Meester

README

Parses composer.json/composer.lock and package.json/package-lock.json files for retrieving information about licenses from those packages.

Packages can be skipped based on their license and will be added to a list of "failed packages" if no license information is available. No validity checks are done on the license itself (e.g. whether it appears on the SPDX License List).

Example

<?php

use MeesterDev\PackageParser\Parsers\ParserFactory;

$parser = ParserFactory::createForFilePath('composer.json');
$parser->ignoreLicenses(['proprietary', 'UNLICENSED']);
$packages = $parser->parse();

var_dump($packages, $factory->skippedPackages, $factory->failedPackages); // probably a pretty long dump