[TRON-18508] [MINOR] Prepare repository for open sourcing

[ClaudiaGivan]

• add license
• add code of conduct
• remove sensitive data from files

[ClaudiaGivan]

@August1914 I found that here should be put the name of the contributor who made the first commit, in this case, Heather.
Could you please confirm if this is correct?

[dickolsson]

@ClaudiaGivan I don't think it's necessary to make copyright attribution here. Where did you find the information that said so?

[August1914]

When you think about it — Heather intended for us to replace that with an appropriate value (if any) for copyright attribution.

[ClaudiaGivan]

@dickolsson The official documentation or guide is this: https://opensource.org/license/apache-2-0/
But I found the info in this blog post: https://www.linkedin.com/pulse/how-apply-apache-20-license-your-open-source-software-vladimír-gorej/
where it says "The name of the copyright holder is the name of the first committer to the project"

[August1914]

@dickolsson the guidance referenced by Claudia above looks correct: a copyright should be included under the terms of Apache 2.0, and that the copyright holder should be the first committer: in our case, Heather. I suppose the question is if there is a general policy to not leave any reference to pfizer.com. If that's the case, I think we should include still include a copyright statement, but use a non-pfizer email, for example, claudia's. Without the copyright statement, I think anyone can package the library for resale, despite the Apache 2.0 provisions.

[dickolsson]

@August1914 @ClaudiaGivan For all intents and purposes, I think Claudia will be the first committer once the repo history is rebased clean before the release (as per Pfizer's open source policy: https://confluence.pfizer.com/display/DSOEPipeline/Publishing+Open+Source+Code

@ClaudiaGivan Do you have a non-Pfizer email that you would be comfortable with sharing publicly in the Copyright line there?

[ClaudiaGivan]

@dickolsson yes, I will use the github email: [email protected]

[ClaudiaGivan]

Once this PR is merged, a subsequent PR will be initiated, dedicated to filtering out all the commits from the commit history that contain sensitive data in the specified file. This ensures the thorough removal of the sensitive information from the commit history.

[dickolsson]

@ClaudiaGivan I don't think it's necessary to make copyright attribution here. Where did you find the information that said so?