Make project REUSE compliant

.ai/guidelines/frontend.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2025 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Frontend Guidelines
 
 ## Tools and Architecture

.dockerignore

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 .git
 /.idea
 node_modules

.editorconfig

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 root = true
 
 [*]

.env.ci

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 APP_NAME=PILOS
 APP_ENV=production
 APP_KEY=

.env.example

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 APP_NAME=PILOS
 APP_ENV=production
 APP_KEY=

.gitattributes

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 * text=auto eol=lf
 *.{cmd,[cC][mM][dD]} text eol=crlf
 *.{bat,[bB][aA][tT]} text eol=crlf

CODE_OF_CONDUCT.md → .github/CODE_OF_CONDUCT.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,4 +1,8 @@
 ---
+# SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 name: Bug report
 about: Create a report to help us improve
 title: ""

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,4 +1,8 @@
 ---
+# SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 name: Feature request
 about: Suggest an idea for this project
 title: ""

.github/SECURITY.md

@@ -0,0 +1,23 @@
+<!--
+SPDX-FileCopyrightText: 2023 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
+# Security Policy
+
+## Supported Versions
+
+We actively support PILOS through the matrix chat and through security updates.
+
+| Version | Supported          |
+|---------| ------------------ |
+| 5.x     | :x:                |
+| 4.x     | :white_check_mark: |
+| 3.x     | :x:                |
+| 2.x     | :x:                |
+| 1.x     | :x:                |
+
+## Reporting a Vulnerability
+
+If you believe you have found a security vulnerability in PILOS please let us know directly by using GitHub's "Report a vulnerability" functionality on https://github.com/THM-Health/PILOS/security/advisories

.github/dependabot.yml

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2023 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:

.github/pull_request_template.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2020 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 <!--
 PLEASE READ THIS MESSAGE.
 

.github/skills/configuring-horizon/SKILL.md

@@ -1,4 +1,8 @@
 ---
+# SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 name: configuring-horizon
 description: "Use this skill whenever the user mentions Horizon by name in a Laravel context. Covers the full Horizon lifecycle: installing Horizon (horizon:install, Sail setup), configuring config/horizon.php (supervisor blocks, queue assignments, balancing strategies, minProcesses/maxProcesses), fixing the dashboard (authorization via Gate::define viewHorizon, blank metrics, horizon:snapshot scheduling), and troubleshooting production issues (worker crashes, timeout chain ordering, LongWaitDetected notifications, waits config). Also covers job tagging and silencing. Do not use for generic Laravel queues without Horizon, SQS or database drivers, standalone Redis setup, Linux supervisord, Telescope, or job batching."
 license: MIT

.github/skills/configuring-horizon/references/metrics.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Metrics & Snapshots
 
 ## Where to Find It

.github/skills/configuring-horizon/references/notifications.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Notifications & Alerts
 
 ## Where to Find It

.github/skills/configuring-horizon/references/supervisors.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Supervisor & Balancing Configuration
 
 ## Where to Find It

.github/skills/configuring-horizon/references/tags.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Tags & Silencing
 
 ## Where to Find It

.github/skills/fortify-development/SKILL.md

@@ -1,4 +1,8 @@
 ---
+# SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 name: fortify-development
 description: 'ACTIVATE when the user works on authentication in Laravel. This includes login, registration, password reset, email verification, two-factor authentication (2FA/TOTP/QR codes/recovery codes), passkeys, profile updates, password confirmation, or any auth-related routes and controllers. Activate when the user mentions Fortify, auth, authentication, login, register, signup, forgot password, verify email, 2FA, passkeys, WebAuthn, or references app/Actions/Fortify/, CreateNewUser, UpdateUserProfileInformation, FortifyServiceProvider, config/fortify.php, or auth guards. Fortify is the frontend-agnostic authentication backend for Laravel that registers all auth routes and controllers. Also activate when building SPA or headless authentication, customizing login redirects, overriding response contracts like LoginResponse, or configuring login throttling. Do NOT activate for Laravel Passport (OAuth2 API tokens), Socialite (OAuth social login), or non-auth Laravel features.'
 license: MIT

.github/skills/laravel-best-practices/SKILL.md

@@ -1,4 +1,8 @@
 ---
+# SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 name: laravel-best-practices
 description: "Apply this skill whenever writing, reviewing, or refactoring Laravel PHP code. This includes creating or modifying controllers, models, migrations, form requests, policies, jobs, scheduled commands, service classes, and Eloquent queries. Triggers for N+1 and query performance issues, caching strategies, authorization and security patterns, validation, error handling, queue and job configuration, route definitions, and architectural decisions. Also use for Laravel code reviews and refactoring existing Laravel code to follow best practices. Covers any task involving Laravel backend PHP code patterns."
 license: MIT

.github/skills/laravel-best-practices/rules/advanced-queries.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Advanced Query Patterns
 
 ## Use `addSelect()` Subqueries for Single Values from Has-Many

.github/skills/laravel-best-practices/rules/architecture.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Architecture Best Practices
 
 ## Single-Purpose Action Classes

.github/skills/laravel-best-practices/rules/blade-views.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Blade & Views Best Practices
 
 ## Use `$attributes->merge()` in Component Templates

.github/skills/laravel-best-practices/rules/caching.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Caching Best Practices
 
 ## Use `Cache::remember()` Instead of Manual Get/Put

.github/skills/laravel-best-practices/rules/collections.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Collection Best Practices
 
 ## Use Higher-Order Messages for Simple Operations

.github/skills/laravel-best-practices/rules/config.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Configuration Best Practices
 
 ## `env()` Only in Config Files

.github/skills/laravel-best-practices/rules/db-performance.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Database Performance Best Practices
 
 ## Always Eager Load Relationships

.github/skills/laravel-best-practices/rules/eloquent.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Eloquent Best Practices
 
 ## Use Correct Relationship Types

.github/skills/laravel-best-practices/rules/error-handling.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Error Handling Best Practices
 
 ## Exception Reporting and Rendering

.github/skills/laravel-best-practices/rules/events-notifications.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Events & Notifications Best Practices
 
 ## Rely on Event Discovery

.github/skills/laravel-best-practices/rules/http-client.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # HTTP Client Best Practices
 
 ## Always Set Explicit Timeouts

.github/skills/laravel-best-practices/rules/mail.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Mail Best Practices
 
 ## Implement `ShouldQueue` on the Mailable Class

.github/skills/laravel-best-practices/rules/migrations.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Migration Best Practices
 
 ## Generate Migrations with Artisan

.github/skills/laravel-best-practices/rules/queue-jobs.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Queue & Job Best Practices
 
 ## Set `retry_after` Greater Than `timeout`

.github/skills/laravel-best-practices/rules/routing.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Routing & Controllers Best Practices
 
 ## Use Implicit Route Model Binding

.github/skills/laravel-best-practices/rules/scheduling.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Task Scheduling Best Practices
 
 ## Use `withoutOverlapping()` on Variable-Duration Tasks

.github/skills/laravel-best-practices/rules/security.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Security Best Practices
 
 ## Mass Assignment Protection

.github/skills/laravel-best-practices/rules/style.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Conventions & Style
 
 ## Follow Laravel Naming Conventions

.github/skills/laravel-best-practices/rules/testing.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Testing Best Practices
 
 ## Use `LazilyRefreshDatabase` Over `RefreshDatabase`

.github/skills/laravel-best-practices/rules/validation.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
 # Validation & Forms Best Practices
 
 ## Use Form Request Classes

.github/skills/pulse-development/SKILL.md

@@ -1,4 +1,8 @@
 ---
+# SPDX-FileCopyrightText: 2026 Technische Hochschule Mittelhessen (THM) and PILOS contributors
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
 name: pulse-development
 description: "Handles Laravel Pulse setup, configuration, and custom card development. Activates when installing Pulse; configuring the dashboard or authorization gate; setting up recorders and filtering; building custom Livewire cards; optimizing with Redis ingest or sampling; or when the user mentions /pulse, pulse:check, pulse:work, Pulse::record(), or application monitoring."
 license: MIT