# How Is Maka Licensed? Apache 2.0 Terms and Verification Guide

> Understand Maka's licensing with our guide to the Apache 2.0 terms. Verify its license easily within the repository for full compliance.

- Repository: [The Apache Software Foundation/maka](https://github.com/apache/maka)
- Tags: getting-started
- Published: 2026-09-11

---

**Maka is licensed under the Apache License 2.0**, as explicitly declared in the repository's top-level `LICENSE` file and the `"license": "Apache-2.0"` field within [`package.json`](https://github.com/apache/maka/blob/main/package.json).

The Apache Maka project adopts the permissive Apache 2.0 license, making it suitable for both commercial and open-source applications. Understanding how Maka is licensed ensures compliance when embedding the code in derivative works or redistributing modified versions. The licensing terms are canonically defined in two authoritative locations within the apache/maka repository.

## Primary License Declaration

The Apache License 2.0 governing Maka is documented through two primary mechanisms: the full legal text in the `LICENSE` file and the machine-readable declaration in [`package.json`](https://github.com/apache/maka/blob/main/package.json).

### LICENSE File Location

The repository's top-level `LICENSE` file contains the complete Apache License 2.0 text and required attribution notices. This file serves as the legal foundation for all usage, modification, and distribution of the Maka codebase. According to the apache/maka source code, this document also includes a dedicated "Third-Party Components" section that aggregates license terms for bundled dependencies.

### package.json Declaration

The [`package.json`](https://github.com/apache/maka/blob/main/package.json) manifest explicitly declares the license field to ensure npm-aware tooling recognizes the project's open-source status:

```json
"license": "Apache-2.0"

```

This machine-readable field allows automated license scanners and package managers to immediately identify Maka's permissive licensing without manual file inspection.

## Third-Party Component Licensing

While Maka's core code is Apache-2.0 licensed, the project incorporates various third-party components such as Vercel AI SDK, Astryx, and node-pty. These components retain their original licenses—predominantly MIT and Apache-2.0—and are documented in the same `LICENSE` file under the "Third-Party Components" section.

Redistribution of Maka requires compliance with both the primary Apache license and the specific terms of these bundled dependencies. The accompanying `NOTICE` file aggregates required attribution notices for these third-party components as mandated by Apache license terms.

## Programmatic License Verification

Developers can verify Maka's licensing status programmatically during development or CI pipeline execution.

### Reading package.json via Node.js

Extract the license field directly from the manifest:

```javascript
// Programmatically read the license field from package.json
import fs from 'node:fs/promises';
import path from 'node:path';

const pkgPath = path.resolve(import.meta.dirname, '..', 'package.json');
const pkg = JSON.parse(await fs.readFile(pkgPath, 'utf8'));
console.log('Maka license:', pkg.license); // → Apache-2.0

```

### Using npm Commands

Query the license metadata via npm:

```bash

# Using npm to list the license of the main package

npm view https://github.com/apache/maka.git license

# Output: Apache-2.0

```

### Validating the LICENSE File

Confirm the presence of Apache licensing headers in the distribution:

```bash

# Checking that the LICENSE file exists and contains the Apache header

grep -i "Apache License" LICENSE

```

## License Compliance and Automation

### NOTICE File Requirements

The `NOTICE` file in the repository root aggregates required attribution notices for third-party components. This file must accompany any redistribution of Maka binaries or source code to comply with Apache License 2.0 section 4(d).

### ASF License Header Script

The repository includes `scripts/asf-license-headers.mjs`, a helper utility that ensures source files contain proper Apache Software Foundation (ASF) license headers. This script automates compliance verification during the development workflow.

## Summary

- **Maka is licensed under Apache License 2.0**, as confirmed by both the `LICENSE` file and [`package.json`](https://github.com/apache/maka/blob/main/package.json).
- The `LICENSE` file contains complete legal text plus a "Third-Party Components" section documenting bundled dependencies.
- Third-party components retain their original licenses (MIT, Apache-2.0) and require attribution via the `NOTICE` file.
- Developers can verify licensing programmatically using Node.js file system APIs, npm commands, or shell scripts.
- The `scripts/asf-license-headers.mjs` utility ensures source file headers comply with ASF standards.

## Frequently Asked Questions

### Is Maka open source?

Yes. Maka is fully open source under the Apache License 2.0, which permits free use, modification, and distribution. The license is OSI-approved and widely adopted by Apache Software Foundation projects.

### Can I use Maka in commercial projects?

Yes. The Apache License 2.0 is a permissive license that explicitly allows commercial use, including proprietary derivative works and closed-source redistributions. You must include the `LICENSE` and `NOTICE` files and preserve copyright statements.

### What license covers Maka's dependencies?

Maka's dependencies retain their original licenses, predominantly MIT and Apache-2.0. These are documented in the "Third-Party Components" section of the `LICENSE` file. You must comply with each component's specific terms when redistributing Maka.

### How do I verify Maka's license programmatically?

Check the `"license": "Apache-2.0"` field in [`package.json`](https://github.com/apache/maka/blob/main/package.json) using Node.js file system methods or run `npm view https://github.com/apache/maka.git license`. For distribution validation, verify the `LICENSE` file contains "Apache License" headers using standard text processing tools.