chore: add NOTICE file for third-party components

[danielmeppiel]

Summary

Adds a top-level NOTICE.md enumerating the third-party open source components distributed with the apm package, along with their license texts and any additional upstream attribution (NOTICE, AUTHORS files where applicable).

Scope

All 14 direct runtime dependencies declared in pyproject.toml are listed:

• click, colorama, PyYAML, python-frontmatter, tomli, toml, rich, rich-click, GitPython, ruamel.yaml, requests, llm, llm-github-models, watchdog

For each component the file includes:

• Component name
• Verbatim license / copyright notice from the upstream project
• Additional attribution from NOTICE or AUTHORS files where the upstream provides them (applies to: requests, watchdog, GitPython)

Format

The file follows the standard NOTICES template — header line, then one section per component containing Open Source License/Copyright Notice and (where applicable) Additional Attribution. Saved as NOTICE.md at the repository root per convention.

Testing

Documentation-only change. No code or test changes.

Notes

This covers direct dependencies (industry-standard scope for a NOTICE file). Transitive dependencies are not enumerated; if a broader scope is desired in the future it can be added incrementally.

---

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

[Copilot]

Pull request overview

Adds a repository-root NOTICE.md to document third-party runtime dependencies shipped with the apm Python package, including license texts and upstream attributions where applicable.

Changes:

• Introduces NOTICE.md containing per-dependency license/attribution sections for 14 direct runtime dependencies.
• Includes verbatim upstream license texts plus extra NOTICE/AUTHORS attributions for select packages (e.g., requests, watchdog, GitPython).

Show a summary per file

File	Description
NOTICE.md	New NOTICE document enumerating direct runtime dependencies and their license/attribution text.

Copilot's findings

Comments suppressed due to low confidence (1)

NOTICE.md:599

• This inline note also says "see Open Issues" but doesn't point anywhere concrete. For a licensing/NOTICE document, please replace with a specific link (or a tracked internal issue number) so readers can resolve the license ambiguity.

_Copyright (c) 2025 Anthony Shaw (LICENSE header) -- note: file contents are MIT-style header followed by Apache-2.0 reference; see Open Issues_

• Files reviewed: 1/1 changed files
• Comments generated: 3

[Copilot]

The introductory paragraph manually hyphenates "Build-" across a newline, which will render as "Build- time" in Markdown. Please remove the hard line break (or the hyphen) so the phrase reads correctly as "Build-time".

Suggested change

	with this project (the runtime dependencies of the `apm` Python package). Build-
	time and contributor-only tooling (test runners, linters, type-checkers, the
	PyInstaller build backend, and the `setuptools` / `wheel` build system) are not
	distributed and are intentionally omitted, as is install-time user state created
	by the CLI under `apm_modules/`. No third-party source is vendored into this
	repository.
	with this project (the runtime dependencies of the `apm` Python package).
	Build-time and contributor-only tooling (test runners, linters, type-checkers,
	the PyInstaller build backend, and the `setuptools` / `wheel` build system) are
	not distributed and are intentionally omitted, as is install-time user state
	created by the CLI under `apm_modules/`. No third-party source is vendored into
	this repository.

[Copilot]

This line uses nested backticks (... `pyyaml` ...), which breaks Markdown inline-code rendering. Consider rewriting without nested backticks (e.g., use a plain word, escape the inner backticks, or switch to a fenced code block).

Suggested change

	- Version requirement: `>=6.0.0 (declared as `pyyaml`)`
	- Version requirement: >=6.0.0 (declared as pyyaml)

[Copilot]

"See Open Issues" is referenced here, but this NOTICE doesn't include an "Open Issues" section or a link/identifier to the specific issue(s). Please either link to the relevant upstream/repo issue(s) or remove the reference to avoid ambiguity for auditors.

This issue also appears on line 599 of the same file.

Suggested change

	- Notes: Upstream LICENSE file declares MIT license text but PyPI metadata + classifiers say Apache-2.0. See Open Issues.
	### Open Source License/Copyright Notice.
	_Copyright (c) 2025 Anthony Shaw (LICENSE header) -- note: file contents are MIT-style header followed by Apache-2.0 reference; see Open Issues_
	- Notes: Upstream LICENSE file declares MIT license text, but PyPI metadata and classifiers say Apache-2.0.
	### Open Source License/Copyright Notice.
	_Copyright (c) 2025 Anthony Shaw (LICENSE header) -- note: file contents are MIT-style header followed by an Apache-2.0 reference_