chore(license): flip 5039 PMPL→MPL-2.0 stamps in iser-tools/ (Phase 2) by hyperpolymath · Pull Request #104 · hyperpolymath/developer-ecosystem

hyperpolymath · 2026-06-02T15:08:15Z

Summary

Phase 2 of the developer-ecosystem PMPL→MPL-2.0 sweep (Phase 1 = #103). This PR covers the iser-tools/ subtree as a single batch per the per-subdir scoping plan.

Scope

5,039 files flipped SPDX-License-Identifier: PMPL-1.0-or-later → MPL-2.0 across 23 *iser/ subdirs:

Subdir	Files
`iser-tools/nimiser/`	225
`iser-tools/ponyiser/`, `iser-tools/otpiser/`, `iser-tools/oblibeniser/`, `iser-tools/iseriser/`, `iser-tools/idrisiser/`	222 each
`iser-tools/wokelangiser/`, `iser-tools/mylangiser/`, `iser-tools/lustreiser/`, `iser-tools/julianiser/`	221 each
`iser-tools/tlaiser/`, `iser-tools/halideiser/`	220 each
`iser-tools/phronesiser/`	219
`iser-tools/ephapaxiser/`, `iser-tools/chapeliser/`, `iser-tools/bqniser/`	217 each
`iser-tools/eclexiaiser/`, `iser-tools/dafniser/`, `iser-tools/betlangiser/`, `iser-tools/atsiser/`, `iser-tools/anvomidaviser/`	216 each
`iser-tools/futharkiser/`, `iser-tools/alloyiser/`	215 each

Verification

Each iser-tools/*/LICENSE is already MPL-2.0 ✓ — only the source-file SPDX stamps were drifting.
These are check-in copies (NOT git submodules — verified, no .gitmodules entries for iser-tools/).
grep -rl 'SPDX-License-Identifier: PMPL-1.0-or-later' iser-tools/ returns 0 files post-sweep.

Coordination note

The standalone hyperpolymath/*iser repos (nimiser, ponyiser, idrisiser, iseriser, anvomidaviser, otpiser, etc.) exist as separate repos in the org and all still have PMPL source SPDX drift today. Each will need its own equivalent flip PR (separate work). If iser-tools/ is auto-regenerated from those, the changes here will revert on next sync — flag for owner: which is the source of truth?

Why draft

Single PR with 5,039 files changed (uniform SPDX header flip); owner sight on diff size before merge.

Same pattern as

hyperpolymath/neurophone#102 (canonical PMPL→MPL fix)
hyperpolymath/developer-ecosystem#103 (Phase 1: root + small infra)

🤖 Generated with Claude Code

See PR description for per-subdir breakdown and coordination note re standalone *iser repos. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0


github-actions · 2026-06-02T15:25:14Z

🔍 Hypatia Security Scan

Findings: 810 issues detected

Severity	Count
🔴 Critical	217
🟠 High	384
🟡 Medium	209

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

…fe subdirs) (#105) ## Summary Phase 3 of the developer-ecosystem PMPL→MPL-2.0 sweep. Companion to #103 (Phase 1) and #104 (Phase 2 iser-tools). This PR covers **all dev-ecosystem subdirs where only the source SPDX needs flipping** — i.e., subdirs that either have no own LICENSE or already have an MPL-2.0 LICENSE. ## Scope (1,465 files) **No own LICENSE (treated as dev-ecosystem topical content):** - `affinescript-ecosystem/affinescript/` — 1 file - `affinescript-ecosystem/affinescript-deno-test/` — 11 - `rescript-ecosystem/connectors/` — 1 - `rescript-ecosystem/.machine_readable/` — 6 - `rescript-ecosystem/ppx-proven-record/` — 2 - `rescript-ecosystem/rescript-deno-starter/` — 1 - `rescript-ecosystem/rescript-vite-config/` — 1 - `rescript-ecosystem/packages/` — ~1,062 - `coq-ecosystem/`, `zig-ecosystem/`, `ada-ecosystem/`, `zig-api/` — combined ~141 **Own LICENSE already MPL-2.0 (only SPDX needs alignment):** - `affinescript-ecosystem/affinescriptiser/` — 216 - `rescript-ecosystem/rescript-string-power/` — 23 ## Explicitly EXCLUDED from this PR | Path | Reason | |---|---| | `asdf-augmenters/*` | Superseded by `hyperpolymath/odds-and-sods-package-manager` (opsm); skip per owner direction. opsm is already clean (0 PMPL). | | `affinescript-ecosystem/affinescript-vite/` | Possible upstream Vite fork | | `affinescript-ecosystem/rattlescript/` | Check-in copy of `hyperpolymath/rattlescript` standalone | | `rescript-ecosystem/rescript-tea/` | Possible upstream ReScript-Tea fork | | `rescript-ecosystem/idaptik-rescript13-staging/` | AGPL inherit from son-shared idaptik | | `rescript-ecosystem/cadre-router/`, `cadre-tea-router/` | Check-in copies of `hyperpolymath/*` standalones | | `rescript-ecosystem/rescript-evangeliser/` | Listed as submodule (`satellites/developer-ux/rescript-evangeliser`) | | `rescript-ecosystem/rescript/` | LICENSE says "multiple licenses" — needs explicit review | | `rescript-ecosystem/rescript-dom-mounter/`, `rescript-vite/` | Own PMPL LICENSE — Phase 4 (LICENSE+SPDX together) | | All dev-ecosystem subdirs with own PMPL LICENSE | Phase 4 (LICENSE+SPDX together) | | `v-ecosystem/v-*`, `satellites/*`, `julia-ecosystem/`, `scaffoldia/` | Submodules — separate repos | ## Why draft Per-subdir scoping; owner sight on coverage decisions before merge. ## Verification ``` grep -rl 'SPDX-License-Identifier: PMPL-1.0-or-later' <phase-3-paths> # returns: 0 files ``` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…ase 4) (#106) ## Summary Phase 4 of the developer-ecosystem PMPL→MPL-2.0 sweep. Companion to #103/#104/#105. This PR covers the **14 dev-ecosystem sub-projects that have their own PMPL-1.0-or-later LICENSE files** (a more invasive change than the SPDX-only flips in earlier phases — LICENSE file content is also replaced). ## Why these sub-projects, not standalone repos Verified via `gh api repos/hyperpolymath/<name>` that **none of these 14 sub-projects have standalone GitHub repos** — they're dev-ecosystem-local (unlike the iser-tools/* or *iser standalones). So fixing them in dev-ecosystem is the right place — no risk of divergence from a parallel standalone. ## Scope **14 subdir LICENSE files replaced** (PMPL-1.0-or-later → MPL-2.0 canonical text, sourced from the dev-ecosystem root `LICENSE`): - `devkit-risc-v/`, `synapse/`, `bridge-nginx-zig/`, `techstack-enforcer/`, `riscv-guix-buildsys/`, `idris2-ecosystem/`, `packages/`, `opm-canonicalizer/`, `czech-file-knife/`, `dnfinition/`, `well-known-ecosystem/`, `aggregate-library/`, `deno-ecosystem/`, `rescript-ecosystem/rescript-dom-mounter/` **Source SPDX flips** (count below — see verification). ## Explicitly EXCLUDED from this PR - `rescript-ecosystem/rescript-vite/` — **EXCLUDED** as potential upstream ReScript-Vite fork (same precautionary stance as `rescript-tea/` and `affinescript-vite/`). Owner-flagged 2026-06-02. Will be revisited separately after fork-vs-local classification. ## Verification ```sh # All 14 Phase 4 subdir LICENSEs now MPL-2.0: for d in <14 phase-4 subdirs>; do head -1 "$d/LICENSE"; done # all return: SPDX-License-Identifier: MPL-2.0 # Source SPDX in Phase 4 scope: grep -rl 'SPDX-License-Identifier: PMPL-1.0-or-later' <14 phase-4 subdirs> # returns: 0 files ``` ## Why draft LICENSE file replacements are more invasive than SPDX flips. Owner sight before merge. ## Pattern this PR follows - `neurophone#102` for the SPDX-flip mechanics - Same care-bracketing as `iser-tools/` (#104), but with the additional LICENSE-file step - `rescript-vite/` deliberately deferred for fork-vs-local classification 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

chore(license): flip 5039 PMPL→MPL-2.0 stamps (Phase 2 — iser-tools)

d87c922

See PR description for per-subdir breakdown and coordination note re standalone *iser repos. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

hyperpolymath mentioned this pull request Jun 2, 2026

chore(license): flip 1465 PMPL→MPL-2.0 stamps (Phase 3 — SPDX-only safe subdirs) #105

Merged

github-advanced-security AI found potential problems Jun 2, 2026

View reviewed changes

hyperpolymath mentioned this pull request Jun 2, 2026

chore(license): replace 14 subdir LICENSEs + flip 446 SPDX stamps (Phase 4) #106

Merged

hyperpolymath marked this pull request as ready for review June 2, 2026 15:55

hyperpolymath enabled auto-merge (squash) June 2, 2026 15:55

hyperpolymath merged commit 89741d5 into main Jun 2, 2026
20 of 22 checks passed

hyperpolymath deleted the chore/license-iser-tools-mpl-2-0 branch June 2, 2026 19:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(license): flip 5039 PMPL→MPL-2.0 stamps in iser-tools/ (Phase 2)#104

chore(license): flip 5039 PMPL→MPL-2.0 stamps in iser-tools/ (Phase 2)#104
hyperpolymath merged 1 commit into
mainfrom
chore/license-iser-tools-mpl-2-0

hyperpolymath commented Jun 2, 2026

Uh oh!

github-actions Bot commented Jun 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

		@@ -1,4 +1,4 @@
		// SPDX-License-Identifier: PMPL-1.0-or-later
		// SPDX-License-Identifier: MPL-2.0

		@@ -1,4 +1,4 @@
		# SPDX-License-Identifier: PMPL-1.0-or-later
		# SPDX-License-Identifier: MPL-2.0

Uh oh!

Conversation

hyperpolymath commented Jun 2, 2026

Summary

Scope

Verification

Coordination note

Why draft

Same pattern as

Uh oh!

github-actions Bot commented Jun 2, 2026

🔍 Hypatia Security Scan

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants