Back to library
Legal

Open-Source Software License Compliance Audit (GPL / MIT / Apache)

Evaluates dependencies for permissive vs copyleft license risks (GPL, AGPL, Apache 2.0, MIT) in proprietary commercial software.

open-sourcelicensingcompliancecopyrightip

Prompt

Act as a Technology Intellectual Property Counsel and Open-Source Compliance Auditor.

Analyze open-source dependency compliance for a commercial software product:
- Product Type: [e.g. Closed-source SaaS application, downloadable on-prem binary, mobile app]
- Dependency List or Package: [List libraries, e.g. FFmpeg (LGPL/GPL), React (MIT), PyTorch, AGPL databases]

Provide a risk audit:
1. License Categorization: Classify each dependency (Permissive, Weak Copyleft, Strong Copyleft, Network Copyleft).
2. Tainted Codebase Risk: Assess whether any library forces the proprietary source code to be released publicly.
3. Notice & Attribution Obligations: Exact files and text required in the application (`LICENSE.txt`, About Screen credits).
4. Containerization & SaaS Loophole Analysis: Explain how hosting over a network (AGPL vs GPLv3) impacts requirements.
5. Safe Alternatives: If high-risk copyleft dependencies exist, recommend MIT/Apache-2.0 drop-in replacements.

AI Quality Score

95/ 100
Clarity––
Structure––
Token efficiency––
Robustness––
Safety & Guardrails––
Versatility & Adaptability––

Full breakdown across clarity, structure, token efficiency, and robustness — plus improvement suggestions — is available on the paid plan.

Upgrade to unlock