Project Starfish DevlogGitHub
2026-06-19

Going public: Apache-2.0, on npm and GitHub

Free for personal and commercial use, with the trademark as the moat.

To become a default rather than a niche tool, the core and CLI went out under Apache-2.0, free for personal and commercial use. Permissive licensing wins ubiquity and adds a patent grant; the moat is the trademark and a future certification mark, not a restrictive license.

The CLI shipped as a single self-contained bundle installable from both npm and GitHub, with a first-run wizard that seeds fail-closed governance and a customizable base root. The repo went public.

The bet is simple: the most trustworthy way to own a category is to give the foundation away and earn the enterprise layer (compliance, anchoring, federation, a governed marketplace) on top of it.

Project Starfish · a governance-first, deny-by-default AI ecosystem · Apache-2.0. This devlog is a backdated build journal reconstructed from the project history.