Clearlydefined Definition
clearlydefined_definitionGet the curated licence and attribution record for one exact component version from ClearlyDefined: declared SPDX licence, every licence expression discovered in the files, the copyright holders that must be attributed, the upstream source repo + commit the release was built from, release date, file hashes, and 0-100 completeness scores. AUTHORITATIVE for "what licence is @ really under" and "who do I have to attribute" — it reports what scanners found in the shipped files, not just what the manifest claims. Keyless.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Component name, e.g. "express", "log4j-core", "requests". | |
| type | Yes | Component type: "npm", "maven", "pypi", "gem", "nuget", "crate", "composer", "go", "git", "deb", "pod". | |
| provider | Yes | Where it was published: "npmjs", "mavencentral", "pypi", "rubygems", "nuget", "cratesio", "packagist", "golang", "github", "debian", "cocoapods". | |
| revision | Yes | Exact version or commit, e.g. "4.18.2", "2.17.1", or a git SHA. | |
| namespace | No | Group/scope/org, e.g. "org.apache.logging.log4j" for Maven or "@babel" for a scoped npm package. Omit (or pass "-") when the ecosystem has none. | |
| file_limit | No | How many file rows to include when include_files is true. Default 50, max 500. | |
| include_files | No | Include the per-file licence/attribution rows (can be long). Default false. |