From fd6db6db9b50000e516b47cce888acdba8324c1b Mon Sep 17 00:00:00 2001 From: justFU7 Date: Tue, 18 Aug 2026 01:40:27 +0530 Subject: [PATCH 1/2] fix: pack the NOTICE file The published tarball has never contained it, so downstream redistributors cannot carry the attribution notices Apache-2.0 section 4(d) asks them to preserve. --- package.json | 1 + 1 file changed, 1 insertion(+) diff --git a/package.json b/package.json index e757e720..1058d3b7 100644 --- a/package.json +++ b/package.json @@ -109,6 +109,7 @@ "/assets", "/scripts", "/npm-shrinkwrap.json", + "/NOTICE", "/openapi.yaml", "/oclif.manifest.json" ], From 0b1d9b740691d24729071c078a404501feb22341 Mon Sep 17 00:00:00 2001 From: justFU7 Date: Tue, 18 Aug 2026 01:58:02 +0530 Subject: [PATCH 2/2] chore: add changeset for the NOTICE packaging fix --- .changeset/pack-notice-file.md | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .changeset/pack-notice-file.md diff --git a/.changeset/pack-notice-file.md b/.changeset/pack-notice-file.md new file mode 100644 index 00000000..f84d3ca1 --- /dev/null +++ b/.changeset/pack-notice-file.md @@ -0,0 +1,6 @@ +--- +"@asyncapi/cli": patch +--- + +Pack the `NOTICE` file. npm always includes `README` and `LICENSE` from the package root regardless of +`files`, but `NOTICE` needs an explicit entry, so it had never reached the published tarball.