REFERENCE / LICENSES
Licenses
License metadata is part of the pack’s publisher attestation.
01Declare an SPDX license
Public publication requires a license and rights attestation. Keep source URLs and any additional rights notes visible on the provenance page.
02Attribution still matters
A verified artifact can still contain knowledge with obligations. Review the license and source notes before redistribution.