From e863872daa567ff6dc1cfdf36bf2a9c65cfc692d Mon Sep 17 00:00:00 2001 From: Binay Date: Tue, 18 Aug 2026 16:27:26 -0400 Subject: [PATCH] chore: remove an unsigned contributor from CONTRIBUTORS MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit @adity982 never signed the CLA. Verified against the authoritative store — signatures/cla.json on the cla-signatures branch lists exactly one signed contributor (AdvaitVarhade, from #73). The two "I have read the CLA" strings on #55 are the bot's own instruction text and a quote of it in a maintainer comment, not a signature. CONTRIBUTORS.md states that the people listed are acknowledged "for contributions accepted under the Contributor License Agreement", so an unsigned contribution does not belong in that list. NOTE — this leaves an open provenance question, not resolved here. The Aider adapter merged in #96 is a port of their #55, and aider.py still records that derivation in its module docstring. Without a signed CLA the copyright assignment never happened, so the repo now contains code derived from an unassigned contribution. That needs a decision (reimplement from the sibling adapters, or obtain a signature) — flagged rather than settled by this commit. --- CONTRIBUTORS.md | 1 - 1 file changed, 1 deletion(-) diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md index c1dd1ff..3893daf 100644 --- a/CONTRIBUTORS.md +++ b/CONTRIBUTORS.md @@ -19,5 +19,4 @@ owner. -- **ADITYA** ([@adity982](https://github.com/adity982)) — Aider executor adapter behind the Executor protocol ([#55](https://github.com/Signetry/core/pull/55), ported in [#96](https://github.com/Signetry/core/pull/96)) - **Advait Varhade** ([@AdvaitVarhade](https://github.com/AdvaitVarhade)) — SSRF (CWE-918) detection rule for JavaScript/Node ([#73](https://github.com/Signetry/core/pull/73)); SSRF URL-argument resolution for keyword + positional calls, plus httpx/aiohttp coverage ([#89](https://github.com/Signetry/core/pull/89))