Exact sources
Selected repositories are MIT-licensed and pinned to the exact inspected commit—not a moving branch.
Reuse with evidence. Give credit with care.
NoReinvent treats maintainers as upstream partners, not invisible raw material. Every selected source is linked, pinned, audited, and preserved in delivery.
Dependency audit
Root license metadata is only the first gate. Paid builds audit dependencies, bundled assets, notices, vulnerabilities, and secrets.
Attribution preserved
Original license files and notices travel with the delivered project. Custom integration code is not blanket relicensed as MIT.
Clear gates before composition
Selected source repositories must have an exact MIT license. Transitive dependencies may use MIT, ISC, BSD-2-Clause, BSD-3-Clause, or Apache-2.0 after inspection. Unknown, custom, source-available, and copyleft dependencies are rejected from the Mini POC build.
Repository popularity is context, never the selection decision. Capability fit, runtime compatibility, reproducibility, tests, maintenance, security, documentation, and integration effort determine the evidence score.
Read the MIT License