io.github.jmshinhwa/spdx-license-field-lint

Official

by jmshinhwa · JavaScript

Reads the licence field in the open manifest and names every deprecated SPDX id, invalid string, PEP

This MCP server reads the licence field in an open manifest and identifies deprecated SPDX identifiers, invalid strings, and items labeled with “PEP”. It is designed to enumerate issues related to SPDX license field formatting found in the manifest content it processes.

🛠️ Key Features

Reads the licence field in an open manifest
Names deprecated SPDX IDs found in the field
Detects invalid string values
Flags values associated with “PEP”

🚀 Use Cases

Validate SPDX license field entries in open manifest files
Audit repositories for deprecated SPDX identifiers
Check manifest data for malformed or nonconforming license strings

⚡ Developer Benefits

Produces a list naming deprecated SPDX IDs and problematic values
Helps pinpoint incorrect licence field content for follow-up fixes

⚠️ Limitations

Focused on the licence field in an open manifest; other manifest fields are not described

Topics

compliancecursordevsecopslintermcp-serveropen-vsxvscode-extension

Install

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "spdx-license-field-lint": {
      "command": "npx",
      "args": [
        "-y",
        "@readystack/spdx-license-field-lint@0.1.4",
        "--mcp"
      ]
    }
  }
}