We're using developer certificate of origin. Used by nextcloud and likes.