license switch agpl -> busl1, sprints work, new product advisories

devops/tools/bench/compute-metrics.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # BENCH-AUTO-401-019: Compute FP/MTTD/repro metrics from bench findings
 
 """

devops/tools/bench/populate-findings.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # BENCH-AUTO-401-019: Automate population of src/__Tests/__Benchmarks/findings/** from reachbench fixtures
 
 """

devops/tools/bench/run-baseline.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # BENCH-AUTO-401-019: Run baseline benchmark automation
 
 set -euo pipefail

devops/tools/callgraph/node/package-lock.json

@@ -7,7 +7,7 @@
     "": {
       "name": "stella-callgraph-node",
       "version": "1.0.0",
-      "license": "AGPL-3.0-or-later",
+      "license": "BUSL-1.1",
       "dependencies": {
         "@babel/parser": "^7.23.0",
         "@babel/traverse": "^7.23.0",

devops/tools/callgraph/node/package.json

@@ -18,7 +18,7 @@
     "static-analysis",
     "security"
   ],
-  "license": "AGPL-3.0-or-later",
+  "license": "BUSL-1.1",
   "dependencies": {
     "@babel/parser": "^7.23.0",
     "@babel/traverse": "^7.23.0",

devops/tools/reachability/run_all.ps1

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # QA-CORPUS-401-031: Deterministic runner for reachability corpus tests (Windows)
 
 [CmdletBinding()]

devops/tools/reachability/run_all.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # QA-CORPUS-401-031: Deterministic runner for reachability corpus tests
 set -euo pipefail
 

devops/tools/reachability/verify_corpus_hashes.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # QA-CORPUS-401-031: Verify SHA-256 hashes in corpus manifest
 set -euo pipefail
 

devops/tools/sbom-validators/bundle.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: BUSL-1.1
 # Copyright (c) StellaOps
 #
 # bundle.sh - Bundle SBOM validators for air-gap deployment