An approach to Open-Source Software License Management using Blockchain-based Smart-Contracts

Abstract

Open source software is increasingly being used by various organizations. Open source licenses such as GPL, MIT, Apache, Mozilla, BSD, etc have varying terms and conditions for usage, modification, and distribution. Given the availability of source code for open source software, it is difficult to scrutinize adherence of licenses and more often than not it is left to the good faith of organizations and individuals. Violation of licensing terms knowingly or unknowingly can lead to copyright, ethical, compliance and security issues. In this paper, we propose a blockchain based approach in managing open source software licenses by enforcing certain practices to improve awareness and increase transparency, thus minimizing the possibility of violations. We present a solution design that relies on the use of 4 modules: InterPlanetary File System (IPFS), Smart contracts, Transaction manager (Meta-Mask) and a Permissioned Blockchain to enforce the conformance of licenses.