The LICENSE file makes it explicit that Kactus is MIT licensed and copyright holders to at least some of the covered code include those listed. Good, that's what the license file is for when the license is MIT. It doesn't make the upstream relationship explicit though. I imagine explicit would be documenting in README or CONTRIBUTING or something like that (not at all required by the license, just informative for users and contributors).