HI, About the licenses, we are introducing a license check into the GH actions to eventually mark PR or COMMIT as invalid (normally this goes together with the testing part where applicable).
For merging PR, I believe we should also introduce some rule to have at least 2 favourable reviews or alternatively a single review from a user different than the PR creator (not sure if this is effectively configurable, as I never tried up to now). I believe that this could be achievable by adding a .asf.yaml file under the different repositories of the Apache OpenServerless projects. Currently we have it only here https://github.com/apache/openserverless. Regards, Francesco