Skip to content

R#

What licenseal reads in an R package. The rules that hold for every ecosystem are under How a scan works.

  • Registry: CRAN (PACKAGES index)
  • Manifests: DESCRIPTION
  • Lockfiles: renv.lock, packrat/packrat.lock

What is read#

  • Imports, Depends, and LinkingTo in DESCRIPTION are read as production.
  • R's license grammar (GPL (>= 2), MIT + file LICENSE) is translated to SPDX; a bare file LICENSE is UNKNOWN. See License expressions.

Dev dependencies#

Suggests and Enhances in DESCRIPTION are dev dependencies.

Off-registry dependencies#

These are reported as off-registry dependencies:

  • a lockfile package from GitHub, GitLab, Bitbucket, git, a URL, a local path, or Bioconductor;
  • a package named by the Remotes field of DESCRIPTION.

Not evaluated#

The license of a version other than the current one. The CRAN index lists the current version of each package only, so a package pinned to another version is reported at the pinned version with the license of the current one, marked as an estimate.

See also#