License mismatch for [email protected] (Apache-2.0 vs MIT)

I noticed a discrepancy in the declared license for bser version 2.1.1.

The published package (e.g., via npm metadata) indicates the license is Apache-2.0 https://www.npmjs.com/package/bser/v/2.1.1

However, the package.json in the repository specifies the license as MIT https://github.com/facebook/watchman/blob/1fbb87950e9af00dde8278adaf87635c53aea3d4/watchman/node/bser/package.json#L25

This mismatch makes it unclear which license actually applies to the distributed artifact.

Additionally, including the license file in the shipped packages, makes the packages compatible with license checkers and attribution file generators, that a lot of developers need for generating copyrights/attribution files.