add to package.json (appears that `"license": "Apache-2.0"` would suffice). Also wouldn't hurt to add a license file as described in the appendix