Skip to content

Add dual MIT/Apache-2.0 license and fill in package metadata - #126

Merged
germ-mark merged 2 commits into
mainfrom
llm/mit-license-package-metadata-6d8f17
Aug 14, 2026
Merged

Add dual MIT/Apache-2.0 license and fill in package metadata#126
germ-mark merged 2 commits into
mainfrom
llm/mit-license-package-metadata-6d8f17

Conversation

@germ-mark

@germ-mark germ-mark commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

The repo is public but had no license file, while rust/Cargo.toml already declared license = "MIT OR Apache-2.0" — a promise with no text behind it. This adds both license texts so that declaration is true, rather than narrowing it.

  • LICENSE-MIT + LICENSE-APACHE (Copyright (c) 2026 Germ Network, Inc.). The Apache body was diffed against the copy vendored in our mls-rs checkout and is byte-equivalent. Appendix omitted, matching serde and mls-rs.
  • Inbound-licensing clause in CONTRIBUTING.md and README.md, so inbound-equals-outbound is stated rather than assumed.
  • package.json gains description / license / author / repository; rust/fuzz/Cargo.toml gains license (it's a standalone workspace and inherits nothing).

Also fixes docs that still referenced Sources/AbstractTwoMLS/, which moved to a separate package. The one worth calling out is in the binding-contract mismatch error at Sources/TwoMLSPQ/PQSession.swift:259 — it told developers to re-sync Sources/TwoMLSPQ/two_mls_pq.swift, which no longer exists, at exactly the moment they'd be trusting that message. All automation already used the correct Sources/TwoMLSPQBinding/ path.

Second commit ignores the Android build outputs (/buildAndroid, *.artifactbundle). The static libs were already covered by *.a, but info.json and the per-arch Headers/ were left untracked. These two lines are verbatim the ones already on the android spike branch, so .gitignore is now identical on both and cannot conflict when that work lands.

Test notes

cargo deny check licenseslicenses ok. taplo fmt --check, cargo fmt --all --check, and both clippy invocations exit 0. swift format lint diffed before/after shows zero new warnings. No Rust or Swift behavior changes — the only code edit is a string literal. Verified the new ignore rules shadow no tracked file.

Repo homepage and topics were set separately via gh repo edit; GitHub's license badge will populate once this merges to main.

🤖 Generated with Claude Code

The repo was public with no license file at all, while rust/Cargo.toml
already declared "MIT OR Apache-2.0" — a promise with nothing backing it.

Also corrects docs that still pointed at Sources/AbstractTwoMLS/ (moved to
a separate package) and at the vendored binding's old location, including
the path in the binding-contract mismatch error, which named the wrong
file to re-sync.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@changeset-bot

changeset-bot Bot commented Aug 14, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 4eb5e00

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@germ-network/two-mls-pq Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

buildAndroid/ and the .artifactbundle it holds are build products, like
buildIos/ beside them. The static libs were already covered by *.a, but
info.json and the per-arch Headers/ were left showing as untracked.

Matches scripts/buildAndroid.sh's output paths on the android spike
branch, whose .gitignore this now equals verbatim.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@germ-mark
germ-mark merged commit 5a886b4 into main Aug 14, 2026
10 checks passed
@germ-mark
germ-mark deleted the llm/mit-license-package-metadata-6d8f17 branch August 14, 2026 17:25
@github-actions github-actions Bot mentioned this pull request Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant