Although EdgeX Foundry is an Apache 2.0 License product, it often uses other open source products, libraries and other works. This is not uncommon for open source efforts. When using other products, contributors must insure that products they use are compatible with the Apache 2.0 license.
PROPOSED - this content is pending review and approval of the TSC and EdgeX Governing Board
Responsibilities
When ever a contributor adds a product or dependency on another 3rd party tool, library, package, or other product to EdgeX (such as adding a new required package to the list of packages required by a Go Lang service), the contributor must check that the addition is compatible with the Apace 2 License of EdgeX. When unsure, contributors should check with the TSC and the Linux Foundation about compatibility before including the addition in any Pull Request or other official artifact contribution.
...