Comment Comment by syntheticcdo Why does Socket flag npm packages with "MIT" in the license field as non-FSF approved, such as in lodash [1]. It appears the FSF seems to prefer to call the MIT license "Expat" -- but Expat's SPDX identifier is literally "MIT".[1] https://socket.dev/npm/package/lodash/files/4.17.21/package....[2] https://directory.fsf.org/wiki/License:Expat parent syntheticcdo 4 years ago
[1] https://socket.dev/npm/package/lodash/files/4.17.21/package....
[2] https://directory.fsf.org/wiki/License:Expat