The Hidden Licensing and Security Risks Lurking in Open-Source Software
Summary
On the other hand, a permissive open-source license, or non-copyleft, offers the liberty to use, modify, and redistribute the work, even for creating proprietary derivative applications, with minimal constraints. A newsworthy example of the critical nuances of OSS licensing claims features Microsoft, GitHub, and OpenAI, who are currently facing a class action lawsuit alleging copyright infringement. The complaint filed in a California court seeks $9 billion in damages, alleging potentially millions of violations of the Digital Millennium Copyright Act (DMCA) Section 1202. SBOMs typically include details regarding the content of a software application, encompassing open-source and proprietary codes, associated licenses, versions in use, component download locations, dependencies, and sub-dependencies. Eracents enterprise clients save significantly on their annual software spend, reduce their audit and security risks, and establish more efficient asset management processes.