Carry the licence this repository is published under - #158
Merged
Conversation
Closes #157. The repository is public and carries a description, and had no LICENSE. Without one, default copyright applies: a reader may look and nothing else, so forking it, building on it and contributing back were all forbidden by a repository that appears to invite them. AGPL-3.0, matching the 24 repositories of this account that already carry it. The text is copied from those byte for byte rather than fetched fresh, so the repositories end up with one licence file and not several slightly different ones - `git hash-object LICENSE` gives fadd1f6, the same blob the exemplar carries. The README ends with the same `## License` section they do. Found on 2026-08-17 by reading the Scorecard alerts across the fleet: LicenseID score is 0: license file not detected 23 public repositories were in that state. Signed-off-by: Nils Lehnen <30603423+iderex@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #157
The issue this belongs to
Closes #157.
What changed
LICENSEis added, carrying AGPL-3.0, and the README ends with the## Licensesection the repositories that already carry it end with. Nothing else is touched.
What failure it prevents
A public repository without a licence is one nobody may use. Default copyright
applies: a reader may look and nothing else, so forking it, building on it and
contributing back are all forbidden by a repository that carries a description
and appears to invite them.
Scorecard reported it as
LicenseID score is 0: license file not detected. 23public repositories of this account were in that state.
Evidence
The same blob id as the exemplar, which is stronger than the same size: the file
is byte-identical rather than merely a rendering of the same licence.
What a guard here refuses, and the proof it bites
Nothing here is a guard, so there is no deletion that would make one bite. The
change adds a licence file and a section pointing at it. What stands in for a
proof is the hash comparison below: the file is byte-identical to the exemplar,
so it is not a fresh rendering that happens to look the same.
What this does not cover
LICENSEis added, carrying AGPL-3.0, and the README ends with the## Licensesection the repositories that already carry it end with. Nothing else is touched.
Who has read it
The same hand wrote the change and this text, and there is no second reader on
this board. Under the account rule that nothing reaches the mainline that only
its own author has read, that rule is NOT satisfied here. The change is a file
copied byte for byte from a repository that already carries it, which is the
smallest surface a change can have, and the copy is verified by hash below.