Align headers and license metadata with govern-opensource standard

[qiuz-cz]

What

Brings the OSS template in line with the govern-opensource standard, surfaced during the CTO-1890 OSS release review:

1. Replace proprietary headers with SPDX Apache-2.0 headers in all 7 Python and JS/TS source files. They carried Copyright (c) CloudZero - ALL RIGHTS RESERVED - PROPRIETARY AND CONFIDENTIAL ... Direct all questions to legal@cloudzero.com — a proprietary notice that every repo created from this open-source template inherits, contradicting the Apache-2.0 licensing the template exists to establish.
2. Fix FILE-HEADER: stray comma (Copyright (c), CloudZero) that didn't match the standard's header template or its validation regex.
3. python/pyproject.toml: PEP 639 SPDX string form (license = "Apache-2.0"), setuptools>=77 (required for PEP 639), and removal of the License :: classifier (deprecated by PEP 639; newer setuptools rejects it alongside a license expression).

All headers verified against the standard's validation regex. javascript/package.json already declared Apache-2.0 correctly — unchanged. CHANGELOG.md deliberately untouched since it's template content shipped to downstream projects.

Related

• cz-standards PR #68 — same PEP 639 fix in the standard's own example
• Open Source at CloudZero (Confluence) — regex + example fixed (v30)

PR Generated with AI

Co-Authored-By: AI

[greptile-apps]

Greptile Summary

This PR aligns the template’s source headers and Python package metadata with the Apache-2.0 open-source standard.

• Replaces proprietary notices in Python and JavaScript/TypeScript files with SPDX headers.
• Corrects the canonical FILE-HEADER copyright text.
• Adopts the PEP 639 license expression, updates the required setuptools version, and removes the deprecated license classifier.

Confidence Score: 5/5

The PR appears safe to merge because the changes consistently update licensing metadata without altering runtime behavior or breaking supported build paths.

The source changes are comment-only, and the Python metadata uses the matching setuptools build requirement needed to process the new PEP 639 license expression.

Important Files Changed

Filename	Overview
FILE-HEADER	Corrects the copyright punctuation and normalizes the reference header without affecting repository automation.
python/pyproject.toml	Moves license metadata to the PEP 639 SPDX form and requires a compatible setuptools backend.
javascript/src/index.ts	Replaces the proprietary notice with a syntactically valid Apache-2.0 SPDX header; runtime code is unchanged.
python/src/init.py	Replaces the proprietary notice with a syntactically valid Apache-2.0 SPDX header; package behavior is unchanged.

_{Reviews (1): Last reviewed commit: "Align headers and license metadata with ..." | Re-trigger Greptile}

[silvexis]

APPROVE — Aligns FILE-HEADER and JS/Python template sources with SPDX Apache-2.0 headers and updates pyproject license metadata (PEP 639 + setuptools>=77 build floor). Tests green across Node 18/20/22 and Python 3.11–3.13; not behind main. No runtime behavior change. Prior APPROVE still applies.