fix: use static license badges for private repos

Author: eli-sterling

RELEASE_NOTES.md

@@ -1,5 +1,11 @@
 # Release Notes
 
+## 15.0.1 — 2026-10-25
+
+### Fixed
+
+- Use a static License badge for private repositories and derive its value from package metadata.
+
 ## 15.0.0 — 2026-10-21
 
 ### Changed

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@eliware/test",
-  "version": "15.0.0",
+  "version": "15.0.1",
   "type": "module",
   "description": "Shared deterministic repository validation for Eliware projects",
   "keywords": [
@@ -44,7 +44,7 @@
     "node": ">=26"
   },
   "dependencies": {
-    "@babel/parser": "^8.0.7",
+    "@babel/parser": "^8.0.8",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
     "istanbul-lib-instrument": "^6.0.3",

package.json

@@ -84,6 +84,9 @@ directives:
         @eliware/<repo-name>` followed by badges on the same line.
       - Use the npm, License, and CI badges in that order. Include npm only when
         package.json.eliware.apply includes npm-published.
+      - For repositories that apply the private profile, use the private License badge and
+        package.json.license as its message.
+      - For repositories without the private profile, use the public License badge.
       - Use the exact brand image, badge targets, and title markers shown in the examples.
       - Include all sections resolved from package.json.eliware.apply and
         ordering/readme-sections.yaml.

specs/conventions/general-deterministic.yaml

@@ -134,6 +134,7 @@ orders:
         - title
         - npmBadge
         - licenseBadge
+        - privateLicenseBadge
         - ciBadge
       supportBlock: text
       licenseLink: text

specs/conventions/ordering/ordering-data-schema.yaml

@@ -106,6 +106,8 @@ orders:
       com/package/@eliware/<repo-name>)"
     licenseBadge: "[![License](https://img.shields.io/github/license/eliware/<repo-name>)](ht\
       tps://github.com/eliware/<repo-name>/blob/main/LICENSE)"
+    privateLicenseBadge: "[![License](https://img.shields.io/badge/license-<license>-blue)](ht\
+      tps://github.com/eliware/<repo-name>/blob/main/LICENSE)"
     ciBadge: "[![CI](https://github.com/eliware/<repo-name>/actions/workflows/ci.yaml/badge.s\
       vg)](https://github.com/eliware/<repo-name>/actions/workflows/ci.yaml)"
   supportBlock: "For help, questions, or to chat with the author and community, visit:

specs/conventions/ordering/readme-sections.yaml

@@ -25,8 +25,17 @@ export function validateReadmeBranding(readme, packageJson = {}) {
   const badgeNames = includeNpm
     ? order.badgeOrder
     : order.badgeOrder.filter((badge) => badge !== "npm");
+  const privateRepository = packageJson?.eliware?.apply?.includes("private");
   const badgeLine = `${template.title.replace("@eliware/<repo-name>", name)} ${badgeNames
-    .map((badge) => template[`${badge.toLowerCase()}Badge`]?.replaceAll("<repo-name>", slug))
+    .map((badge) => {
+      const key =
+        badge === "License" && privateRepository
+          ? "privateLicenseBadge"
+          : `${badge.toLowerCase()}Badge`;
+      return template[key]
+        ?.replaceAll("<repo-name>", slug)
+        .replaceAll("<license>", encodeURIComponent(packageJson?.license ?? ""));
+    })
     .join(" ")}`;
   const lines = readme.split(/\r?\n/u);
   return lines[0] === template.brand && lines[2] === badgeLine

src/checks/shared/E-0.1.0.1.3/validate-readme/branding.mjs

@@ -18,7 +18,14 @@ export const readmeSectionsRequirements = {
   },
   maps: {
     headerLines: ["brand", "title-and-badges", "description", "table-of-contents"],
-    headerTemplates: ["brand", "title", "npmBadge", "licenseBadge", "ciBadge"],
+    headerTemplates: [
+      "brand",
+      "title",
+      "npmBadge",
+      "licenseBadge",
+      "privateLicenseBadge",
+      "ciBadge",
+    ],
     profileSections: canonicalProfileOrder,
     sharedSections: ["Commands"],
   },

src/validation/shared/conventions/canonical-order-requirements/readme-sections.mjs

@@ -16,6 +16,32 @@ test("accepts canonical package badges", () => {
   expect(validateReadmeBranding(readme, pkg)).toBeNull();
 });
 
+test("uses the package license in the private repository badge", () => {
+  const privatePackage = {
+    ...pkg,
+    license: "MIT",
+    eliware: { apply: ["general", "private"] },
+  };
+  const privateLine = line
+    .replace(
+      " [![npm](https://img.shields.io/npm/v/@eliware/fixture)](https://www.npmjs.com/package/@eliware/fixture)",
+      "",
+    )
+    .replace(
+      "https://img.shields.io/github/license/eliware/fixture",
+      "https://img.shields.io/badge/license-MIT-blue",
+    );
+
+  expect(validateReadmeBranding(`${header}\n\n${privateLine}`, privatePackage)).toBeNull();
+  expect(validateReadmeBranding(readme, privatePackage)).toContain("badge row");
+  expect(
+    validateReadmeBranding(
+      `${header}\n\n${privateLine.replace("license-MIT-blue", "license-Apache-2.0-blue")}`,
+      privatePackage,
+    ),
+  ).toContain("badge row");
+});
+
 test("rejects incomplete package metadata and badge rows", () => {
   expect(validateReadmeBranding(readme, {})).toContain("package name");
   expect(validateReadmeBranding("wrong", pkg)).toContain("canonical logo header");