chore(license): Apache 2.0 licensing for CNCF: verbatim LICENSE, NOTICE and source headers (#134)

* chore(license): use CNCF-style source headers

Add the apache2-cncf licence to .golic.yaml: golic's Apache 2.0 header
with the copyright line "Copyright The CryptOS Authors." and no year,
following the CNCF copyright-notices guidance. NOTICE and the README
licence line use the same notice.

Refs CryptOS-PKI/.github#4

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>

* chore(license): re-stamp source headers with the CNCF copyright line

golic remove -t apache2 -c "2026 Shane" drops the old header by exact
text, then golic inject -t apache2-cncf adds the new one in the same
place, so the copyright line is the only line that changes in each file.
The license tasks now use the apache2-cncf template. Headers golic does
not manage are edited the same way by hand.

Refs CryptOS-PKI/.github#4

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>

* chore(license): use the verbatim Apache License 2.0 text

The LICENSE file had reworded sections 6 and 9 and a filled-in appendix,
so licence scanners, including GitHub's, could not match it to
Apache-2.0. Replace it with the text published at
https://www.apache.org/licenses/LICENSE-2.0.txt, byte for byte.
Copyright and attribution stay in NOTICE.

Refs CryptOS-PKI/.github#4

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>

* revert: re-stamp source headers with the CNCF copyright line

This reverts commit 62be158, the interim re-stamp. golic v1.2.0 renders the verbatim Apache 2.0 notice, so the headers go back to the old text and are replaced in one pass in the next commit.

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>

* chore(license): stamp the verbatim Apache 2.0 notice with golic v1.2.0

golic v1.2.0 renders apache2 as the notice from the Apache License appendix, with no title line. golic replace -t apache2 -c "The CryptOS Authors." swaps the old header in place, so the local apache2-cncf licence is no longer needed and is removed from .golic.yaml.

The Taskfile pins golic v1.2.0, and license and license:fix pass --license-file, so task license (and CI) also checks that LICENSE is the verbatim Apache 2.0 text.

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>

---------

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>
Co-authored-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>

Author: Bugs5382

.licignore

@@ -13,6 +13,9 @@
 # ...even when they live in subdirectories:
 !*/
 
+# golic skips *.d.ts by default; this one is hand-written and keeps its header.
+!src/vite-env.d.ts
+
 # Never the build output, deps, caches, or generated docs:
 /node_modules/**
 **/node_modules/**

LICENSE

@@ -1,3 +1,4 @@
+
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -137,8 +138,8 @@
 
    6. Trademarks. This License does not grant permission to use the trade
       names, trademarks, service marks, or product names of the Licensor,
-      except as required for describing the origin of the Work and
-      reproducing the content of the NOTICE file.
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
 
    7. Disclaimer of Warranty. Unless required by applicable law or
       agreed to in writing, Licensor provides the Work (and each
@@ -162,15 +163,16 @@
       other commercial damages or losses), even if such Contributor
       has been advised of the possibility of such damages.
 
-   9. Accepting Warranty or Support. While redistributing the Work or
-      Derivative Works thereof, You may accept support, warranty,
-      indemnity, or other liability obligations and/or rights consistent
-      with this License. However, in accepting such obligations, You may
-      act only on Your own behalf and on Your sole responsibility, not on
-      behalf of any other Contributor, and only if You agree to indemnify,
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
       defend, and hold each Contributor harmless for any liability
       incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or support.
+      of your accepting any such warranty or additional liability.
 
    END OF TERMS AND CONDITIONS
 
@@ -181,11 +183,11 @@
       replaced with your own identifying information. (Don't include
       the brackets!)  The text should be enclosed in the appropriate
       comment syntax for the file format. We also recommend that a
-      file's name and copyright notice be included on the same "page"
-      as the copyright notice for easier identification within third-party
-      archives.
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
 
-   Copyright 2026 Shane
+   Copyright [yyyy] [name of copyright owner]
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

NOTICE

@@ -1,5 +1,5 @@
 CryptOS-PKI / web
-Copyright 2026 Shane
+Copyright The CryptOS Authors.
 
 This product includes software developed as part of the CryptOS-PKI project
 (https://github.com/CryptOS-PKI).

README.md

@@ -92,4 +92,4 @@ The pre-push hook runs `npm run lint` and `npm test`. CI runs lint, test and bui
 
 ## 📄 License
 
-[Apache License 2.0](LICENSE). Copyright 2026 Shane.
+[Apache License 2.0](LICENSE). Copyright The CryptOS Authors.

Taskfile.yml

@@ -2,12 +2,12 @@ version: "3"
 
 tasks:
   license:
-    desc: Verify every source file carries the Apache 2.0 license header (CI; never writes).
+    desc: Verify every source file carries the Apache 2.0 license header and LICENSE is the verbatim Apache 2.0 text (CI; never writes).
     cmds:
-      - go install github.com/Bugs5382/golic/cmd/golic@v0.3.0
-      - golic inject -t apache2 -c "2026 Shane" --dry -x
+      - go install github.com/Bugs5382/golic/cmd/golic@v1.2.0
+      - golic inject -t apache2 -c "The CryptOS Authors." --license-file --dry -x
   license:fix:
-    desc: Inject the Apache 2.0 header into any source file missing it.
+    desc: Inject the Apache 2.0 header into any source file missing it and rewrite LICENSE to the verbatim Apache 2.0 text.
     cmds:
-      - go install github.com/Bugs5382/golic/cmd/golic@v0.3.0
-      - golic inject -t apache2 -c "2026 Shane"
+      - go install github.com/Bugs5382/golic/cmd/golic@v1.2.0
+      - golic inject -t apache2 -c "The CryptOS Authors." --license-file

eslint.config.js

@@ -1,7 +1,5 @@
 /*
-Apache License 2.0
-
-Copyright 2026 Shane
+Copyright The CryptOS Authors.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

postcss.config.js

@@ -1,7 +1,5 @@
 /*
-Apache License 2.0
-
-Copyright 2026 Shane
+Copyright The CryptOS Authors.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

src/App.test.tsx

@@ -1,7 +1,5 @@
 /*
-Apache License 2.0
-
-Copyright 2026 Shane
+Copyright The CryptOS Authors.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

src/App.tsx

@@ -1,7 +1,5 @@
 /*
-Apache License 2.0
-
-Copyright 2026 Shane
+Copyright The CryptOS Authors.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

src/components/cert-inventory.test.tsx

@@ -1,7 +1,5 @@
 /*
-Apache License 2.0
-
-Copyright 2026 Shane
+Copyright The CryptOS Authors.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.