Apache License

Apache-2.0 is a widely used permissive license.

Common Approach:

• Allow by default
• Ensure attribution/NOTICE requirements are followed in distribution artifacts where applicable

What DevSecOps Bot by Sttor Helps with:

• Detecting Apache-2.0 across transitive dependencies
• Tracking how/when it entered the codebase