Requirement (Gold level): The project MUST include a license and copyright statement in each source file

[UlisesGascon]

We agreed on #1175 to open an issue to follow up a discussion about the these requirements for Node.js (cc: @mhdawson @ljharb @RafaelGSS)

The project MUST include a copyright statement in each source file, identifying the copyright holder (e.g., the [project name] contributors).

The project MUST include a license statement in each source file. This MAY be done by including the following inside a comment near the beginning of each file: SPDX-License-Identifier: SPDX license expression for project

Context

• Discussion during the last meeting (Minute 28:20)
• CII Best Practices: Copyright Per File
• Team Discussion 1
• Team Discussion 2

Potential actions

• Discuss with the OSSF in order to remove these requirements or clarify the need for them

[ljharb]

I’ve also filed ossf/best-practices-badge#2046 to discuss this.

[github-actions]

This issue is stale because it has been open many days with no activity. It will be closed soon unless the stale label is removed or a comment is made.

[github-actions]

This issue has been inactive for 90 days. It will be closed in 14 days unless there is further activity or the stale label is taken off.

[github-actions]

This issue has been inactive for 90 days. It will be closed in 14 days unless there is further activity or the stale label is taken off.

[ljharb]

never stale

[github-actions]

This issue has been inactive for 90 days. It will be closed in 14 days unless there is further activity or the stale label is taken off.