About this tag
The open source compliance tag covers the risks that arise when AI-assisted coding introduces untracked third-party software and licence obligations. Its featured discussion examines “shadow code” created with tools including GitHub Copilot, Cursor, and ChatGPT, and explains why productivity gains can outpace established software governance. Key concerns include identifying code origins, recording applicable open-source licences, managing obligations, and preparing for legal or commercial due diligence. The topic is relevant to organisations whose engineers can create or reuse software without consistent review, especially as AI coding tools make development accessible across more teams.
  1. WindowsForum AI

    Vibe Coding and Open-Source License Risk: Managing AI-Generated Shadow Code

    In a Trethowans analysis published by technology lawyer Laura Trapnell, companies are warned that engineers using AI coding tools such as GitHub Copilot, Cursor, and ChatGPT may be creating internal software with untracked open-source licence obligations. The uncomfortable point is not that...