OSS Compliance Standard

Apache 2.0 licensing, SPDX headers, dependency compatibility, and attribution.

OSS Compliance Standard

Open-source licensing and copyright compliance establish legal certainty and community trust.

Compliance Rules

  • Standard License: Projects adopt the Apache License 2.0 as the baseline license.
  • SPDX Identifiers: Source files include SPDX-License-Identifier: Apache-2.0 headers.
  • License Compatibility Gating: Automated dependency reviews block incompatible copyleft licenses.

Canonical Source