Packagist · packagist:composer/spdx-licenses

composer/spdx-licenses active

SPDX licenses list and validation library.

Latest stable version	1.6.0
Published	2026-04-08 20:18:39+00:00
Install	`composer require composer/spdx-licenses`
Required PHP version (composer.json)	`PHP ^7.2 \|\| ^8.0`
License	MIT
Advisories on latest version	none known
Last verified	2026-10-08 15:00:11 UTC
Sources	api.osv.dev, repo.packagist.org

Maintenance

Activity	slowing down
Last stable release	2026-04-08 20:18:39 UTC · 183 days ago
Stable releases in the last 12 months	2
Published versions	23

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

Version	Published
`1.6.0`	2026-04-08 20:18:39 UTC
`1.5.10`	2026-04-08 20:11:16 UTC
`1.5.9`	2025-05-12 21:07:07 UTC
`1.5.8`	2023-11-20 07:44:33 UTC
`1.5.7`	2022-05-23 07:37:50 UTC
`1.5.6`	2021-11-18 10:14:14 UTC
`1.5.5`	2020-12-03 16:04:16 UTC
`1.5.4`	2020-07-15 15:35:07 UTC
`1.5.3`	2020-02-14 07:44:31 UTC
`1.5.2`	2019-07-29 10:31:59 UTC
`1.5.1`	2019-03-26 10:23:26 UTC
`1.5.0`	2018-11-01 09:45:54 UTC
`1.4.0`	2018-04-30 10:33:04 UTC
`1.3.0`	2018-01-31 13:17:27 UTC
`1.2.0`	2018-01-03 16:37:06 UTC
`1.1.6`	2017-04-03 19:08:52 UTC
`1.1.5`	2016-09-28 07:17:45 UTC
`1.1.4`	2016-05-04 12:27:30 UTC
`1.1.3`	2016-03-25 10:57:10 UTC
`1.1.2`	2015-10-05 11:27:42 UTC

Showing the 20 most recent of 23 versions. JSON

Version compatibility

Newest stable version that declares support for each runtime version (from the requirements published with each version).

Runtime	Newest compatible version
`php 7.4`	`1.6.0`
`php 8.0`	`1.6.0`
`php 8.1`	`1.6.0`
`php 8.2`	`1.6.0`
`php 8.3`	`1.6.0`
`php 8.4`	`1.6.0`

Give your AI agent these facts

Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

Add to Cursor Add to VS Code ★ Star on GitHub

Any other MCP client

{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests

Frequently asked questions

What is the latest version of composer/spdx-licenses?

The latest stable version of composer/spdx-licenses is 1.6.0, published on 2026-04-08. Verified by Vigia on 2026-10-08.

How do I install the latest version of composer/spdx-licenses?

Run composer require composer/spdx-licenses. The latest stable version is 1.6.0 (verified 2026-10-08).

Is composer/spdx-licenses deprecated?

No. composer/spdx-licenses is not marked as deprecated in the registry.

Which PHP version does composer/spdx-licenses require?

composer/spdx-licenses 1.6.0 declares this requirement: PHP ^7.2 || ^8.0.

Does composer/spdx-licenses 1.6.0 have known vulnerabilities?

No known advisories affect composer/spdx-licenses 1.6.0 according to the data Vigia checks.

Is composer/spdx-licenses still maintained?

composer/spdx-licenses published 2 stable releases in the last 12 months; the most recent was 183 days ago. Activity: slowing down.

Observed changes

No changes observed yet since Vigia started tracking this package.

Related packages

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/packagist/composer/spdx-licenses/version.svg)](https://vigia.coredls.cloud/packagist/composer/spdx-licenses)
[![maintained](https://vigia.coredls.cloud/badge/packagist/composer/spdx-licenses/maintained.svg)](https://vigia.coredls.cloud/packagist/composer/spdx-licenses)
[![status](https://vigia.coredls.cloud/badge/packagist/composer/spdx-licenses/status.svg)](https://vigia.coredls.cloud/packagist/composer/spdx-licenses)

For agents

GET https://vigia.coredls.cloud/v1/packages/packagist/composer/spdx-licenses
GET https://vigia.coredls.cloud/v1/packages/packagist/composer/spdx-licenses/versions/{version}