chore: License change & CLA (vendure-ecommerce#2946)

* chore: Change license to GPL v3
* chore: Add CLA & signing workflow

.github/workflows/cla.yml

@@ -0,0 +1,37 @@
+name: "CLA Assistant"
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened,closed,synchronize]
+
+# explicitly configure permissions, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings
+permissions:
+  actions: write
+  contents: write # this can be 'read' if the signatures are in remote repository
+  pull-requests: write
+  statuses: write
+
+jobs:
+  CLAAssistant:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "CLA Assistant"
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
+        uses: contributor-assistant/github-action@v2.4.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          path-to-signatures: 'license/signatures/version1/cla.json'
+          path-to-document: 'https://github.com/vendure-ecommerce/vendure/blob/master/license/CLA.md'
+          branch: 'master'
+          allowlist: user1,bot*
+
+          # the followings are the optional inputs - If the optional inputs are not given, then default values will be taken
+          #remote-organization-name: enter the remote organization name where the signatures should be stored (Default is storing the signatures in the same repository)
+          #remote-repository-name: enter the  remote repository name where the signatures should be stored (Default is storing the signatures in the same repository)
+          #create-file-commit-message: 'For example: Creating file for storing CLA Signatures'
+          #signed-commit-message: 'For example: $contributorName has signed the CLA in $owner/$repo#$pullRequestNo'
+          #custom-notsigned-prcomment: 'pull request comment with Introductory message to ask new contributors to sign'
+          #custom-pr-sign-comment: 'The signature to be committed in order to sign the CLA'
+          #custom-allsigned-prcomment: 'pull request comment when all contributors has signed, defaults to **CLA Assistant Lite bot** All Contributors have signed the CLA.'

CONTRIBUTING.md

@@ -97,3 +97,9 @@ After cloning the Vendure repo, please follow the [Development guide](https://gi
 ## Contributing Admin UI translations
 
 If you wish to contribute translations of the Admin UI into another language (or improve an existing set of translations), please see the [Localization guide](https://github.com/vendure-ecommerce/vendure/blob/master/packages/admin-ui/README.md#localization) in the admin-ui package.
+
+## Contributor License Agreement
+
+All contributors are required to agree to the [Contributor License Agreement](./license/CLA.md) before their contributions can be merged.
+
+This is done via an automation bot which will prompt you to sign the CLA when you open a pull request.

LICENSE.md

@@ -0,0 +1,36 @@
+# License
+Copyright (C) Vendure GmbH
+
+This software is available under two different licenses:
+* GNU General Public License version 3 (GPLv3) as Vendure Community Edition
+* Vendure Commercial License (VCL)
+
+The default Vendure license, without a valid Vendure Commercial License agreement, is the Open-Source GPLv3 license.
+
+## GNU General Public License version 3 (GPLv3)
+
+If you decide to choose the GPLv3 license, you must comply with the following terms:
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+## Vendure Commercial License (VCL)
+
+Alternatively, commercial and supported versions of the program - also known as
+Commercial Distributions - must be used in accordance with the terms and conditions
+contained in a separate written agreement between you and Vendure GmbH.
+For more information about the Vendure Commercial License (VCL) please contact contact@vendure.io.
+
+Please see also (files in this directory):
+[Licensing FAQ - license-faq.md](license/license-faq.md)
+[GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 - gpl-3.0.txt](license/gpl-3.0.txt)

README.md

@@ -175,4 +175,4 @@ The reason we do not rely on Lerna to push the release to Git is that this repo
 
 ## License
 
-MIT
+See [LICENSE.md](./LICENSE.md)

license/CLA.md

@@ -0,0 +1,23 @@
+# Contributor License Agreement
+
+The following terms are used throughout this agreement:
+
+- **You** - the person or legal entity including its affiliates asked to accept this agreement. An affiliate is any entity that controls or is controlled by the legal entity, or is under common control with it.
+- **Project** - is an umbrella term that refers to any and all Vendure open source projects.
+- **Contribution** - any type of work that is submitted to a Project, including any modifications or additions to existing work.
+- **Submitted** - conveyed to a Project via a pull request, commit, issue, or any form of electronic, written, or verbal communication with Vendure, contributors or maintainers.
+- **Vendure** - the principal designation of the project, encompassing our commercial entity Vendure GmbH
+
+## 1. Grant of Copyright License.
+
+Subject to the terms and conditions of this agreement, You grant to the Projects’ maintainers, contributors, users and to Vendure a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Your contributions and such derivative works. Except for this license, You reserve all rights, title, and interest in your contributions.
+
+## 2. Grant of Patent License.
+
+Subject to the terms and conditions of this agreement, You grant to the Projects’ maintainers, contributors, users and to Vendure a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer your contributions, where such license applies only to those patent claims licensable by you that are necessarily infringed by your contribution or by combination of your contribution with the project to which this contribution was submitted.
+
+If any entity institutes patent litigation - including cross-claim or counterclaim in a lawsuit - against You alleging that your contribution or any project it was submitted to constitutes or is responsible for direct or contributory patent infringement, then any patent licenses granted to that entity under this agreement shall terminate as of the date such litigation is filed.
+
+## 3. Source of Contribution.
+
+Your contribution is either your original creation, based upon previous work that, to the best of your knowledge, is covered under an appropriate open source license and you have the right under that license to submit that work with modifications, whether created in whole or in part by you, or you have clearly identified the source of the contribution and any license or other restriction (like related patents, trademarks, and license agreements) of which you are personally aware.