[GH-ISSUE #5769] 🔒 CEO Audit: Missing license headers (MEDIUM) #5563

Closed
opened 2026-06-07 16:36:40 -04:00 by yindo · 1 comment
Owner

Originally created by @Delqhi on GitHub (Jun 6, 2026).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/5769

CEO Audit Finding: Missing license headers

Severity: MEDIUM
Axis: Compliance
CWE: COMPL-HEADER
Risk Score: 0.4
Files Affected: 19/20 files sampled (95%) missing SPDX-License-Identifier

Fix Required

Add SPDX-License-Identifier to all source files.

Files to Fix

Run this to see which files are missing headers:

find . -type f \( -name '*.js' -o -name '*.jsx' -o -name '*.ts' -o -name '*.tsx' -o -name '*.py' -o -name '*.sh' \) -not -path './node_modules/*' -not -path './.git/*' | head -20

Implementation

Add at top of each file:

// SPDX-License-Identifier: MIT

Acceptance Criteria

  • All source files have SPDX-License-Identifier header
  • License matches LICENSE file in repo root
  • CI check passes (add to ceo-audit.yml)
Originally created by @Delqhi on GitHub (Jun 6, 2026). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/5769 ## CEO Audit Finding: Missing license headers **Severity:** MEDIUM **Axis:** Compliance **CWE:** COMPL-HEADER **Risk Score:** 0.4 **Files Affected:** 19/20 files sampled (95%) missing SPDX-License-Identifier ## Fix Required Add SPDX-License-Identifier to all source files. ### Files to Fix Run this to see which files are missing headers: ```bash find . -type f \( -name '*.js' -o -name '*.jsx' -o -name '*.ts' -o -name '*.tsx' -o -name '*.py' -o -name '*.sh' \) -not -path './node_modules/*' -not -path './.git/*' | head -20 ``` ### Implementation Add at top of each file: ```javascript // SPDX-License-Identifier: MIT ``` ### Acceptance Criteria - All source files have SPDX-License-Identifier header - License matches LICENSE file in repo root - CI check passes (add to ceo-audit.yml)
yindo closed this issue 2026-06-07 16:36:40 -04:00
Author
Owner

@timothycarambat commented on GitHub (Jun 6, 2026):

what is this?

<!-- gh-comment-id:4640170087 --> @timothycarambat commented on GitHub (Jun 6, 2026): what is this?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#5563