Well, there's tons of conflicting advice out there if that's the case. Top result on DDG links through to this answer: https://opensource.stackexchange.com/questions/5828/where-wo...

And this was my understanding of how it works for artifacts. You don't have to attribute in the software itself, just the code.