Skip to content

docs(notice): date the copyright from 2025 and credit the contributors - #224

Open
SizzleUnrlsd wants to merge 5 commits into
mainfrom
docs/notice-attribution
Open

SizzleUnrlsd wants to merge 5 commits into
mainfrom
docs/notice-attribution

Conversation

@SizzleUnrlsd

Copy link
Copy Markdown
Contributor

Summary

NOTICE dated the copyright from 2026, the year it was added with the move to Apache-2.0, although this repository's first commit dates from March 2025. It named Hugo Payet alone, although other people wrote code that is still here, and Apache-2.0 does not transfer their copyright. docs/licensing.md listed both points as gap 3. The other CoreTrace repositories get the same NOTICE, starting with CoreTrace/coretrace-stack-analyzer#261.

Change

  • NOTICE reads "Copyright 2025-2026 Hugo Payet and the CoreTrace contributors" and gives the repository's URL, so every copy that reproduces it, as Apache-2.0 requires of derivative works, points back here.
  • docs/licensing.md marks gap 3 as done. Where it suggested a pointer to AUTHORS.md, NOTICE links the repository: release archives ship NOTICE but not AUTHORS.md.
  • CHANGELOG.md lists the change under Unreleased.

Verification

  • Nothing reads the content of this NOTICE: Dockerfile.release-binaries and scripts/release/package-macos.sh copy it into the release archives.
  • The install test checks the NOTICE of the bundled analyzers and compiler only for being non-empty, which the pull requests in those repositories keep true.
  • This repository has no commit message check; the five messages pass the commit_checker.py of coretrace-compiler, the strictest in the organization (subjects of at most 72 characters).

The first commit of this repository dates from 11 March 2025, so the
copyright runs from 2025. NOTICE was added in d12d618, on 2026-03-30,
when the project moved to Apache-2.0, and took the year of that move.
Apache-2.0, section 4(d), requires derivative works to carry the
attribution notices in NOTICE. With the repository's URL in it, every
copy that follows the license points back to this project.
Other people authored code that is still in this repository, and
Apache-2.0 licenses their contributions without transferring their
copyright. Gap 3 of docs/licensing.md recommended naming them as a
group next to Hugo Payet, with a pointer to AUTHORS.md. NOTICE points
to the repository instead, whose history names them: release
archives ship NOTICE but not AUTHORS.md.
Gap 3 asked NOTICE to date the copyright from 2025 and to credit the
other authors. NOTICE now does both, and links the repository rather
than AUTHORS.md.
Release archives ship NOTICE next to LICENSE, and every redistribution
must keep it, so the change is listed for users.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant