License Compliance (5)

• Choose an open source license (Choose a License) reference
  Side-by-side of MIT, GPLv3 and others by what each permits, with well-known projects using them
  Copyleft Licensing #
• SPDX License List | Software Package Data Exchange (SPDX) (spdx.org) reference
  Canonical short identifiers, full texts and permanent URLs for licences found in code, data and hardware
  Licensing Supply Chain Security #
• REUSE - Make licensing easy for everyone (reuse.software) reference
  FSFE three-step recipe for per-file copyright and SPDX headers, machine-checkable in CI
  Licensing Supply Chain Security #
• The Open Source Definition (Open Source Initiative) reference
  Ten distribution criteria a license must meet to qualify: redistribution, source, derived works
  Licensing #
• Developer Certificate of Origin (developercertificate.org) reference
  Verbatim v1.1 text of what a contributor certifies by adding a Signed-off-by line to a patch
  Governance Version Control #