Closed jnioche closed 3 years ago
A Developer Certificate of Origin (DCO) is probably the best way to go, given the size of the project. See https://download.fsfe.org/NGI0/V2/FSFE%20-%204%20-%20Free%20Software%20Contribution%20Policy.pdf
Could use https://github.com/apps/dco to check that a contributor has committed with a sign-off
have also installed https://probot.github.io/apps/dco/ so that any PR checks for signed-off commits
See #20