[ianw-oai]

Summary

• Adds the license section required by the Open Source License Application Guide
• States that external code contributions are not accepted, so CLA tooling is not required
• Documents the checker's limitations and the date of its embedded version ranges
• Uses a descriptive public-facing project name

Validation

• git diff --check
• node --check phpcheck.js
• node phpcheck.js --version
• Local CLI unknown-result check

Remaining approvals

This prepares the repository for review. It does not replace the required release approvals.

• The repository slug phrenetic-pheasant-checker is a distinctive name. Rename it to a descriptive slug or obtain Legal trademark clearance before publication.
• Product Security should verify the affected-version ranges and approve release of the PHP vulnerability checker.
• Complete the release request in #release-approval before making the repository public.