Standardize attribution formatting and exclude editorial commentary

examples/licensing/attribution.md

@@ -0,0 +1,43 @@
+# Open Source Attribution Notices
+
+## PROJECT_ONE
+
+Selected module: `MODULE_ONE` at `VERSION_ONE`.
+
+Copyright (C) YEAR_ONE COPYRIGHT_HOLDER_ONE
+
+SPDX-License-Identifier: MIT
+
+License and notices: [MIT](licenses/MIT.txt) |
+[COPYRIGHT](https://example.invalid/PROJECT_ONE/blob/COMMIT_ONE/COPYRIGHT) |
+[LICENSE](https://example.invalid/PROJECT_ONE/blob/COMMIT_ONE/LICENSE).
+
+[Source](https://example.invalid/PROJECT_ONE/tree/COMMIT_ONE).
+
+## PROJECT_TWO
+
+Selected module: `MODULE_TWO` at `VERSION_TWO`.
+
+SPDX-License-Identifier: Apache-2.0
+
+License and notices: [Apache 2.0](licenses/Apache-2.0.txt) |
+[LICENSE](https://example.invalid/PROJECT_TWO/blob/COMMIT_TWO/LICENSE).
+
+[Source](https://example.invalid/PROJECT_TWO/tree/COMMIT_TWO).
+
+## PROJECT_THREE
+
+Selected module: `MODULE_THREE` at `VERSION_THREE` (transitive dependency).
+
+Copyright (C) YEAR_THREE COPYRIGHT_HOLDER_THREE
+
+Copyright (C) YEAR_FOUR COPYRIGHT_HOLDER_FOUR
+
+SPDX-License-Identifier: MIT AND Apache-2.0
+
+License and notices: [MIT](licenses/MIT.txt) |
+[Apache 2.0](licenses/Apache-2.0.txt) |
+[LICENSE](https://example.invalid/PROJECT_THREE/blob/COMMIT_THREE/LICENSE) |
+[NOTICE](https://example.invalid/PROJECT_THREE/blob/COMMIT_THREE/NOTICE).
+
+[Source](https://example.invalid/PROJECT_THREE/tree/COMMIT_THREE).