License and attribution

Fabric Harness is distributed under the Apache License 2.0. The repository LICENSE file is the authoritative license text. Every published package also carries LICENSE and NOTICE in its npm tarball and enables npm provenance.

The license permits use, modification, and distribution subject to its conditions. Distributions must preserve the license and applicable copyright, attribution, and notice material. Modified files should carry appropriate change notices where the license requires them.

Third-party packages retain their own licenses. The documentation renderer, for example, uses MIT licensed Mermaid libraries. Dependency license metadata should be included in release review and software-bill-of-materials output.

The release gate packs and installs every public package in a clean project, imports each exported entrypoint, scans the tarballs for credential patterns, rejects incompatible or unresolved runtime licenses, and generates a CycloneDX SBOM. Run it before publishing:

pnpm build
pnpm check:release

Documentation and examples are maintained as independently authored Fabric Harness material. Do not submit proprietary code or documentation, or material whose license is incompatible with Apache-2.0. Contributors are responsible for preserving any attribution or NOTICE obligations that apply to material they introduce.