Skip to content

fix(license) + ci: Apache-2.0 canonical text + CI workflow + required checks#1

Merged
maxchop merged 2 commits intomainfrom
fix/license-full-apache-2.0-text
Apr 15, 2026
Merged

fix(license) + ci: Apache-2.0 canonical text + CI workflow + required checks#1
maxchop merged 2 commits intomainfrom
fix/license-full-apache-2.0-text

Conversation

@maxchop
Copy link
Copy Markdown
Contributor

@maxchop maxchop commented Apr 15, 2026

Why

https://glama.ai/mcp/servers/true-alter/alter-identity showed a red license - not found mark. Root cause: LICENSE held only the short-form Apache notice, so GitHub's Licensee detector returned NOASSERTION — Glama mirrors that API field. Also: repo had zero CI, so branch protection could not require any status check.

What

Two commits on one branch:

  1. LICENSE — replace short-form notice with full canonical Apache-2.0 body (11358 bytes) pulled from apache.org/licenses/LICENSE-2.0.txt. package.json already declares "license": "Apache-2.0" — unchanged.
  2. .github/workflows/ci.yml — three jobs on push/PR to main: Typecheck (tsc), Test (vitest), Build (tsup). Matches the typecheck/test/build scripts already in package.json. Uses npm install (no lockfile present in this mirror).

Branch protection on main updated separately to require all three contexts plus mirror the true-alter/alter posture (enforce_admins: true, no force-push, no deletion, conversation resolution required).

Test plan

  • CI runs all three jobs on this PR and passes
  • After merge, gh api repos/true-alter/alter-identity --jq .license.spdx_id returns Apache-2.0 (not NOASSERTION)
  • Glama recrawl flips red license mark to green (may take up to 24h)

🤖 Generated with Claude Code

maxchop and others added 2 commits April 16, 2026 01:46
…l text

GitHub's Licensee detector returns NOASSERTION on the short-form notice,
which cascades to Glama ("license - not found" red mark on
https://glama.ai/mcp/servers/true-alter/alter-identity). Replacing with
the canonical full Apache-2.0 body so Licensee pattern-matches and
downstream indexers (Glama, npm, pkg.go.dev) report the correct SPDX id.

Copyright in package.json ("license": "Apache-2.0") unchanged.

Acted-By: ~blake
Drafted-With: ~cc-opus-4-6
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Previously no CI existed. Branch protection on `main` now requires
these three contexts:
- Typecheck (tsc)
- Test (vitest)
- Build (tsup)

Matches scripts already declared in `package.json`. No lockfile in
this mirror so `npm install` (not `npm ci`) + cache removed.

Acted-By: ~blake
Drafted-With: ~cc-opus-4-6
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@maxchop maxchop changed the title fix(license): full Apache-2.0 canonical text (unblocks Glama SPDX detection) fix(license) + ci: Apache-2.0 canonical text + CI workflow + required checks Apr 15, 2026
@maxchop maxchop merged commit 091554f into main Apr 15, 2026
3 checks passed
@maxchop maxchop deleted the fix/license-full-apache-2.0-text branch April 15, 2026 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant