...
EdgeX Foundry is an Apache 2.0 License product. Each EdgeX repository shall include an Apache 2.0 License file at the base of the project. This file will be named LICENSE. The file will contain the Apache 2.0 text defined here: https://www.apache.org/licenses/LICENSE-2.0. For an example, see the following EdgeX repository: https://github.com/edgexfoundry/edgex-go/blob/master/LICENSE
Responsibilities
Contributors are required to validate that any and all contributions made comply with the Apache 2.0 License agreement. Inclusion of 3rd party materials must be of Apache 2.0 or compatible license. BSD, MIT and other license agreements are typically compatible but contributors are encouraged to consult with the Linux Foundation and members of the EdgeX TSC before making a contribution that includes other than Apache 2.0 License material.
Contributors must insure that the LICENSE file (and the Attribution.txt file defined below) are included in the program artifacts associated to that contribution. This may include inclusion in Docker Image, Ubuntu Snap, Java JAR file, etc. Contributors are requested to check with the DevOps WG chairperson or other member of the TSC for assistance in getting these files included in the associated artifacts.
Contents of LICENSE
The LICENSE file will contain the Apache 2.0 text defined here: https://www.apache.org/licenses/LICENSE-2.0. For an example, see the following EdgeX repository: https://github.com/edgexfoundry/edgex-go/blob/master/LICENSE
Attribution
Although EdgeX Foundry is an Apache 2.0 License product, it often uses other open source products, libraries and other works. This is not uncommon for open source efforts. When using other products, contributors must insure that products they use are compatible with the Apache 2.0 license.
Responsibilities
When ever a contributor adds a product or dependency on another 3rd party tool, library, package, or other product to EdgeX (such as adding a new required package to the list of packages required by a Go Lang service), the contributor must check that the addition is compatible with the Apache 2 License of EdgeX. When unsure, contributors should check with the TSC and the Linux Foundation about compatibility before including the addition in any Pull Request or other official artifact contribution.
...