Hi all,

Apache-2.0 stipulates that if a project contains a NOTICE file, then any derivative work must include a readable copy.

Let’s assume I integrate a piece of Apache-2.0 licensed software into a codebase. The REUSE Spec v3 is pretty clear in how to attribute copyright and where to put the license file. I didn’t quite get though, how you handle the NOTICE file.

Of course one could just merge all applicable notices from different NOTICE files into the project’s NOTICE file (if it is also Apache-2.0 licensed) as suggested by the license, but considering maintainability it would be easier to keep them separate, I think. In that case, should a NOTICE file also be put in the licenses folder and be associated with the the code it applies to via some naming convention? Or should it be added to a dep5-file? Or is this still to be specified…?

Thanks for any pointers, Chris

Mit freundlichen Grüßen / Best regards

Dr. Christian Hoeppler

CR Open Source Officer (CR/ADX1.1 CR-OSO) Robert Bosch GmbH | Renningen | 70465 Stuttgart | GERMANY | www.bosch.com Tel. +49 711 811-43624 | Mobile +49 1525 8813463 | Christian.Hoeppler@de.bosch.com

Registered Office: Stuttgart, Registration Court: Amtsgericht Stuttgart, HRB 14000; Chairman of the Supervisory Board: Prof. Dr. Stefan Asenkerschbaumer; Managing Directors: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus Forschner, Stefan Grosch, Dr. Markus Heyn, Dr. Tanja Rückert