References
The following is a list of interesting references which formed part of the research in developing this guide.
Internal docs
- https://github.com/powerhome/rfcs/blob/master/0061-open-source-license-compliance.md
Open source fundamentals
- https://compliance.linuxfoundation.org/
- https://www.openchainproject.org/
- https://resources.whitesourcesoftware.com/blog-whitesource/the-saas-loophole-in-gpl-open-source-licenses
- https://www.synopsys.com/blogs/software-security/saas-companies-open-source-risk/
- https://www.zenko.io/blog/get-started-with-open-source-license-compliance/
- https://github.com/todogroup/policies
- https://www.gnu.org/philosophy/categories.html
- https://www.gnu.org/licenses/gpl-faq.html#InternalDistribution
- https://compliance.linuxfoundation.org/developers/faq/
- https://compliance.linuxfoundation.org/developers/process/
- https://training.linuxfoundation.org/training/open-source-licensing-basics-for-software-developers/
- https://training.linuxfoundation.org/training/fundamentals-of-professional-open-source-management/
- https://www.linuxfoundation.org/resources/open-source-guides/
- https://tldrlegal.com/
- https://choosealicense.com/
Tools
- https://github.com/github/licensed
- https://github.com/pivotal/LicenseFinder
- https://docs.gitlab.com/ee/user/compliance/license_compliance/index.html
- https://oss-compliance-tooling.org/Tooling-Landscape/OSS-Based-License-Compliance-Tools/