Open Source Licensing in the Era of AI-Assisted Coding

on YouTube ↗38m

" summary

Open source SCA platform SCANOSS provides snippet-level detection by hashing code (winnowing, MD5/CRC32C) and matching against a knowledge base of about 3 trillion lines of code, surfacing undeclared components, licenses and vulnerabilities. Results feed SPDX/CycloneDX SBOMs, a free public API backed by the Software Transparency Foundation, CLIs, IDE plugins and SaaS/on‑prem installs for guaranteed SLAs. Integrations with FOSSology/ORT and court-validated evidence (Italian GPL case) show the approach works, while language-agnostic matching accepts some false negatives and occasional context-driven false positives.

AI-written summary · about

" chapters (9)

1. 0:00Open source licensing with AI
2. 1:07AI in coding and open source
3. 3:15AI adoption in software
4. 7:11Legal challenges of AI code
5. 12:08Risks of undeclared open source
6. 15:38Detecting open source in AI code
7. 20:59Advantages of ScanOSS
8. 26:04AI development with compliance
9. 35:13Q&A

" related talks

• 24mLicense compliance with AI assisted codingJulian Coccia · foss-north 2023
• 31mOpen Source SCAJulian Coccia · foss-north 2022
• 14mDoes using AI code assistants involve OSS plagiarism risk?Jeronimo Ortiz · SFSCON 2025
• 33mORT Automate compliance using Open Source & InnerSourceThomas Steenbergen, Surya Santhi · FOSS Backstage 2023
• 35mOSCAR - Automate software analysis, compliance and securityStefan Just · EclipseCon Europe 2018
• 01h 38mOpen Source Licensing: Types, Strategies and ComplianceJeff Luszcz · All Things Open 2020
• 26mThe FOSSology Project – Open Source Software for Open Source License ComplianceAnupam Ghosh · KubeCon + CloudNativeCon China 2019
• 16mAdvanced SAST: How to Secure AI-Generated CodeMario Bastardo · Sonar Summit 2026