Skip to content
CommonLayer

Terms of use

These terms apply to the website, the registry and the API of this CommonLayer instance.

Template — not yet reviewed

Counsel for the operator must review it before production use; the operator fills in the placeholders in brackets, such as [Operator].

The service

This instance of CommonLayer is operated by [Operator], [registered address]. By using it you agree to these terms. If you use it on behalf of an organization, you confirm that you may bind that organization.

Artifacts and licenses

Images and charts are free to pull and use; no payment is required. Each artifact contains software under its upstream licenses, which govern your use of that software. The build configuration, templates and charts are licensed under the Apache License 2.0. A license inventory is published with each release. Nothing in these terms grants rights in upstream software beyond its own license.

Accounts and tokens

You are responsible for activity under your account and your API tokens. Keep credentials secret and revoke tokens you no longer use. The operator may suspend accounts that break these terms; a suspended account cannot sign in and its tokens stop working.

Contributions

  • A contribution funds the treasury of the projects you choose, or shared infrastructure. It is not a purchase of goods or services and does not entitle you to support, priority or private builds.
  • Funds are allocated by each project's published allocation policy; maintainers are compensated only for responsibilities they fulfilled, and unpaid amounts remain with the project.
  • A contribution is confirmed only when the payment provider confirms it. Refunds can be requested within [refund window, default 14 days], up to the amount the project still holds.
  • Recurring contributions can be cancelled at any time in your dashboard and stop at the end of the current period.
  • [State whether contributions are donations, whether they are tax-deductible in any jurisdiction, and how VAT or other taxes apply.]

Maintainers

Maintainers additionally accept the maintainer agreement [link and version], which sets out responsibilities, eligibility, appeals and payouts.

Acceptable use

  • Do not attempt to bypass rate limits, authorization or the verification of artifacts.
  • Do not use the platform to distribute malware, or submit content you have no right to distribute.
  • Automated access through the API and registry is welcome within the published rate limits.

Security research

Good-faith security research is welcome. Report vulnerabilities privately through the reporting form, give the project reasonable time to fix them, and do not access other people's data or degrade the service. [Add the operator's safe-harbour statement.]

No warranty

Artifacts and the service are provided “as is”. Service levels for vulnerability handling are published policy defaults that determine maintainer eligibility; they are not a guarantee that any vulnerability will be fixed within a given time. Scan results describe what scanners found at a point in time, not the absence of vulnerabilities.

Liability

[Limitation of liability as permitted by the applicable law, to be drafted by counsel.]

Changes and law

The operator may change these terms with notice on this page and, for account holders, by email. These terms are governed by the law of [jurisdiction]. Last updated: [date].