https://dirkriehle.com/publications/2017-selected/license-clearance-in-software-product-governance/
Open source license compliance in software supply chains