Conversation
The LICENSE shipped through v0.5.0 had body-text deviations ("to the Licensor" instead of "to Licensor", "excluding any notices" instead of "excluding those notices", missing leading newline, missing APPENDIX section) and substituted [yyyy] / [name of copyright owner] inline with 2026 / Leonardo Di Donato.
licensecheck (used by pkg.go.dev) scored the file at ~6% Apache-2.0 match, well below the 75% confidence floor. pkg.go.dev classified the module as License: UNKNOWN, hid the documentation behind a license-policy notice, marked Redistributable license as failed, and refused to compute the importer graph.
Replace LICENSE with the verbatim text from https://www.apache.org/licenses/LICENSE-2.0.txt. licensecheck now scores 100% Apache-2.0 coverage. The pkg.go.dev page picks this up on the next tagged version; the v0.5.0 snapshot is immutable.
Co-authored-by: Ona <no-reply@ona.com>
Apache 2.0 distinguishes the canonical, verbatim license text (in LICENSE) from project-level attribution that downstream consumers must propagate (in a NOTICE file). The previous setup folded the copyright line into LICENSE itself, which conflated the two. Move "Copyright 2026 Leonardo Di Donato" to a top-level NOTICE file. LICENSE stays the verbatim Apache-2.0 text from the previous commit. Co-authored-by: Ona <no-reply@ona.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes the
License: UNKNOWNclassification on pkg.go.dev/github.com/leodido/kfeatures.Problem
pkg.go.dev currently reports:
License: UNKNOWNRedistributable license: ❌Imported by: 0(the importer graph is suppressed for unknown-license modules).Cause: pkg.go.dev runs the LICENSE file through google/licensecheck, which fuzzy-matches against canonical license templates and needs ~75% confidence. Our LICENSE shipped through v0.5.0 had small body-text deviations and substituted Apache-2.0's appendix placeholders inline:
to the Licensor for inclusion(line 51)to Licensor for inclusionexcluding any notices(line 109)excluding those noticesAPPENDIX: How to apply the Apache License to your work.sectionCopyright 2026 Leonardo Di DonatoCopyright [yyyy] [name of copyright owner](placeholders)Combined, those edits dropped the file to 5.98% licensecheck coverage (only the boilerplate-notice tail matched). I confirmed locally with
licensecheckagainstv0.3.1:Changes
Two commits, one logical change each:
dadc706fix(license): restore canonical Apache-2.0 text — replacesLICENSEwith the verbatim text from https://www.apache.org/licenses/LICENSE-2.0.txt.6e46fcddocs(notice): add NOTICE file with project copyright attribution — movesCopyright 2026 Leonardo Di Donatoto a new top-levelNOTICEfile, which is Apache-2.0's intended mechanism for project-level attribution that downstream consumers must propagate.CHANGELOG.mdupdated under[Unreleased]with one entry per commit (### Fixedfor the LICENSE restore,### Addedfor the NOTICE file).Effect on pkg.go.dev
The
v0.5.0snapshot on pkg.go.dev is immutable, so this fix does not retroactively unhide the docs at the current version. TheLicense: Apache-2.0badge, restored docs, and importer graph appear oncev0.5.1(or any subsequent tag) is published.Verification
Co-authored-by: Ona no-reply@ona.com