skills.rest
tyroneross
tyronerossCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

attribution-standard

Apply and verify Apache-2.0 attribution with SPDX headers and REUSE.toml.

1|Updated Apr 6, 2026
Search Tags:#repository management#attribution#license compliance#SPDX#code enforcement
One-click install
npx skills add https://github.com/tyroneross/build-loop --skill attribution-standard
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: attribution-standard
Source: https://github.com/tyroneross/build-loop/tree/main/skills/attribution-standard
Command: npx skills add https://github.com/tyroneross/build-loop --skill attribution-standard

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automatically applies and verifies the Apache-2.0 attribution model across a repository, ensuring proper copyright notices, SPDX headers, and license declarations are in place.

Core Features & Use Cases

  • Automatic Attribution: Applies the Apache-2.0 attribution to all necessary files, including NOTICE, SPDX headers, and REUSE.toml.
  • Repository Protection: Triggered on actions like 'stamp attribution', 'add NOTICE', or changes that lack proper attribution.
  • Verification: Ensures all canonical strings match, no unauthorized modifications, and proper license and contribution acknowledgments are in place.

Quick Start

Run the 'stamp attribution' command in your repository to apply the attribution standard.

Frequently Asked Questions about attribution-standard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SPDX header enforcement in my code repository?▼

You can automate SPDX header enforcement by running the 'stamp attribution' command to apply Apache-2.0 attribution, NOTICE files, and REUSE.toml configurations across your code repository.

What is the best way to ensure Apache-2.0 license compliance for new code contributions?▼

The best way to ensure Apache-2.0 license compliance is through automated verification that checks all canonical attribution strings, SPDX headers, and license declarations match required templates when repository changes occur.

How do I add a NOTICE file and REUSE.toml to an existing repository?▼

You can add a NOTICE file and REUSE.toml by triggering the 'add NOTICE' action, which automatically applies the Apache-2.0 attribution model and generates the required compliance files for your project.

Can I verify that all attribution strings adhere to canonical templates automatically?▼

Yes, automated verification checks that all attribution strings adhere to canonical templates, ensuring no unauthorized modifications exist and proper license acknowledgments are in place across the repository.

Related Skills

Explore More Software Engineering Skills→
apacheapache
79

magpie-license-compliance-audit

Audit repository license compliance for LICENSE, NOTICE, and SPDX headers.

Official
Advanced
AAbdulghanyAAbdulghany

audit-deps

Audit project dependencies for vulnerabilities, outdated packages, and license compliance.

Community
Advanced
avvaleavvale

conventional-commits

Validate commit messages against the Conventional Commits specification.

Official
Basic
Sir-chawakornSir-chawakorn
9

audit-license-compliance

Audit open-source license compliance across transitive dependency trees and classify copyleft exposure.

Community
Advanced