From cae6d1916b69fdcbae0d39a69e273ab3f7fb2b75 Mon Sep 17 00:00:00 2001 From: rashi arora <74211043+rashi12122001@users.noreply.github.com> Date: Fri, 21 Apr 2023 17:59:53 +0530 Subject: [PATCH 1/2] Update what-is-license-compliance.md Signed-off-by: rashi arora <74211043+rashi12122001@users.noreply.github.com> --- docs/introduction/what-is-license-compliance.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/docs/introduction/what-is-license-compliance.md b/docs/introduction/what-is-license-compliance.md index 7b91c18..ae5954b 100644 --- a/docs/introduction/what-is-license-compliance.md +++ b/docs/introduction/what-is-license-compliance.md @@ -1,4 +1,12 @@ --- title: 'What is license compliance' sidebar_position: 2 ---- \ No newline at end of file +--- +License compliance refers to the procedure of ensuring that software is being used in accordance with its licensing terms and conditions,Proper license compliance can help ensure that software is used legally and ethically while also protecting the intellectual property rights of software creators and reducing the risk of security vulnerabilities caused by unapproved or improperly licensed software. +/ +Failure to comply with licensing terms can result in legal and financial consequences, including loss of access to the software. +FOSSology plays a big role in verification licensing compliance,It can: +/ +1) Help organisations manage their use of open-source software licenses. +2) provides reports on license usage and compliance. +3) tracking software license limitations. From b76ac281138e812f4fe2111bef379da1baa90a92 Mon Sep 17 00:00:00 2001 From: rashi arora <74211043+rashi12122001@users.noreply.github.com> Date: Sat, 6 May 2023 22:20:53 +0530 Subject: [PATCH 2/2] Update what-is-license-compliance.md Hello team, I would like to contribute in this project,i explored about license compliance and summerized it in 700 words If it gets approved,it will be my first contribution to any organisation. Cc: @avinal @GMishx @shaheemazmalmmd Signed-off-by: rashi arora <74211043+rashi12122001@users.noreply.github.com> --- .../what-is-license-compliance.md | 45 +++++++++++++++---- 1 file changed, 37 insertions(+), 8 deletions(-) diff --git a/docs/introduction/what-is-license-compliance.md b/docs/introduction/what-is-license-compliance.md index ae5954b..66922b7 100644 --- a/docs/introduction/what-is-license-compliance.md +++ b/docs/introduction/what-is-license-compliance.md @@ -2,11 +2,40 @@ title: 'What is license compliance' sidebar_position: 2 --- -License compliance refers to the procedure of ensuring that software is being used in accordance with its licensing terms and conditions,Proper license compliance can help ensure that software is used legally and ethically while also protecting the intellectual property rights of software creators and reducing the risk of security vulnerabilities caused by unapproved or improperly licensed software. -/ -Failure to comply with licensing terms can result in legal and financial consequences, including loss of access to the software. -FOSSology plays a big role in verification licensing compliance,It can: -/ -1) Help organisations manage their use of open-source software licenses. -2) provides reports on license usage and compliance. -3) tracking software license limitations. +A license is a set of rules that define how others may use, distribute, modify and interact with the your project and License compliance refers to the procedure of ensuring that software is being used in accordance with its licensing terms and conditions,Proper license compliance can help ensure that software is used legally and ethically while also protecting the intellectual property rights of software creators and reducing the risk of security vulnerabilities caused by unapproved or improperly licensed software. +Failure to comply with licensing terms can result in legal and financial consequences,including loss of access to the software. +
+Open source is source code that can be modified and redistribed without any cost and An open source license allows redistribution of the source code under legal terms and conditions, +The most common open source software license is the GNU General Public License (GPL) which was created by the Free Software Foundation (FSF).GPL requires that any software that is distributed under its terms must be released under the same license,and modifications should be done in public mode. +there are two types of free open license compliance:- +
+1)permissive(least restriction) +2)copyleft(most restricted) +
+1)A permissive software license,(BSD-like or BSD-style license),is a free-software license which carries minimal restrictions on how the software can be used, modified, and redistributed, usually including a warranty disclaimer. +Examples include:- +1)GNU All-permissive License +2)MIT License As of 2016, the most popular free-software license, +3)BSD licenses +4)Apple Public Source License +5)Apache license +
+2)Copyleft software licenses(reciprocal licenses)are considered more protective than permissive licenses,instead of providing the source code completely to the public,copyleft allows authors to impose restrictions on the use of their work.requiring that information necessary for reproducing and modifying the work must be made available to users(which are often distributed as binary executables). +Examples include:- +1)the GNU General Public License (GPL),which was the first software copyleft license to see extensive use is a series of widely used free software licenses that guarantee users the freedom to run,share,and modify the software. +2)the Mozilla Public License(MPL) is a free and open-source weak copyleft license for most Mozilla Foundation software such as Firefox and Thunderbird. +3)the Creative Commons (CC) license is one of several public copyright licenses that enable the free distribution of an otherwise copyrighted "work".A CC license is used when an author wants to give other people the right to share, use, and build upon a work that the author has created. +
+License Management Software +License Management Software tracks software installed throughout the enterprise and ensures legal licensure for its usage. The software may automate scanning, alerting, the procurement of new licenses. It may also uninstall or block the use of unlicensed software. This reduces the risk of fees for illegal use. +
+examples of license compliance software tools that help organizations manage their use of open-source software are FOSSology,black duck hub,vyapin Office 365 Management Suite,etc. +
+1)FOSSology-FOSSology is an open-source license compliance software and toolkit created by the Linux Foundation in 2007 that helps organizations manage their use of open-source software. +It provides automated scanning and analysis of software source code to identify licenses, copyrights, and potential legal issues,it provides a web ui for searching and reviewing the results of the scans,we can Upload and scan software packages,View and manage license information Collaboratively. +
+2)black duck SCA-Black Duck provides a comprehensive SCA solution for managing security, quality,and license compliance risks associated with open source use.Black Duck Hub and its plugin for Team Foundation Server (TFS) allows user to scan,find and fix open source security vulnerabilities during the build process,so you can proactively manage risk. +
+3)vyapin office 365 Management Suite-Vyapin Microsoft 365 Manager is a one-stop 365 solution that bridges the gaps in native Office 365 Portal to manage Users, Groups, Licenses, Permissions & More.The software provides automated features for Office 365 License Management, User provisioning and deprovisioning in bulk, administration of Users, Groups, including Security groups and Distribution groups, and mailbox permissions management without using Powershell scripts. +
+to summerize a license is a set of rules that define how others may use,distribute,modify and interact with a project.Proper license compliance is important to ensure proper use of software,protect rights of creators,and reduce the risk of security vulnerabilities.