Licensing: Contributor License Agreement or Digital Certificate of Origin

[oleg-nenashev]

Proposal

Right now anyone can easily submit a pull request to WireMock. While it is great for contributing, it creates legal concerns since the contributors do not explicitly confirm the license grant, and hence there are risks of various legal claims, e.g. by employers who didn't approve contributions

Ideally we should introduce DCO or CLA, or maybe explicitly reject these approaches and accept risks (and somehow mitigate them). I am not a fun of either approach.

Reference any relevant documentation, other materials or issues/pull requests that can be used for inspiration.

• DCO: https://probot.github.io/apps/dco/
• CLA: https://en.wikipedia.org/wiki/Contributor_License_Agreement
• https://opensource.com/article/18/3/cla-vs-dco-whats-difference