https://dirkriehle.com/2019/07/11/open-source-license-compliance-in-software-supply-chains/
Open source license compliance in software supply chains [Book Chapter]