Disposition: backlog | Severity: S3
Compliance-hygiene gaps for a source-available (Elastic License 2.0) product whose model depends on the license being visible. No source file carries an SPDX/ELv2 header and there is no header enforcement, and there is no aggregated THIRD-PARTY-NOTICES file for bundled Apache-2.0/MIT dependencies that the shipped MAUI binary will redistribute (Apache-2.0 4(d) requires preserving NOTICE content).
- [S3] No Elastic License 2.0 / SPDX header on any source file and no header enforcement —
Directory.Build.props:1 — add a short SPDX/ELv2 header via a build/editorconfig check or one-time sweep.
- [S3] No THIRD-PARTY-NOTICES file for bundled Apache-2.0/MIT dependencies —
Directory.Packages.props:50 — generate and commit a THIRD-PARTY-NOTICES file (license-scan task) and include it in the app package.
Register: AUD-301, AUD-302 (release audit)
Disposition: backlog | Severity: S3
Compliance-hygiene gaps for a source-available (Elastic License 2.0) product whose model depends on the license being visible. No source file carries an SPDX/ELv2 header and there is no header enforcement, and there is no aggregated THIRD-PARTY-NOTICES file for bundled Apache-2.0/MIT dependencies that the shipped MAUI binary will redistribute (Apache-2.0 4(d) requires preserving NOTICE content).
Directory.Build.props:1— add a short SPDX/ELv2 header via a build/editorconfig check or one-time sweep.Directory.Packages.props:50— generate and commit a THIRD-PARTY-NOTICES file (license-scan task) and include it in the app package.Register: AUD-301, AUD-302 (release audit)