{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T17:06:58Z","timestamp":1785604018903,"version":"3.56.0"},"reference-count":214,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key R&D Program of China","doi-asserted-by":"publisher","award":["2024YFE0203800"],"award-info":[{"award-number":["2024YFE0203800"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Research Foundation, Singapore, and DSO National Laboratories through the AI Singapore Programme","award":["AISG2-GC-2023-008"],"award-info":[{"award-number":["AISG2-GC-2023-008"]}]},{"name":"National Research Foundation Singapore and the Cyber Security Agency under the National Cybersecurity R&D Programme","award":["NCRP25-P04-TAICeN"],"award-info":[{"award-number":["NCRP25-P04-TAICeN"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1109\/tse.2025.3586411","type":"journal-article","created":{"date-parts":[[2025,7,7]],"date-time":"2025-07-07T13:49:44Z","timestamp":1751896184000},"page":"2432-2454","source":"Crossref","is-referenced-by-count":4,"title":["Open Source, Hidden Costs: A Systematic Literature Review on OSS License Management"],"prefix":"10.1109","volume":"51","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-6301-874X","authenticated-orcid":false,"given":"Boyuan","family":"Li","sequence":"first","affiliation":[{"name":"DISSec, NDST, College of Computer Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1175-2753","authenticated-orcid":false,"given":"Chengwei","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2428-9297","authenticated-orcid":false,"given":"Lingling","family":"Fan","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Cryptology and Cyber Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9477-4100","authenticated-orcid":false,"given":"Sen","family":"Chen","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Cryptology and Cyber Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8608-1661","authenticated-orcid":false,"given":"Zhenlin","family":"Zhang","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Cryptology and Cyber Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2984-2661","authenticated-orcid":false,"given":"Zheli","family":"Liu","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Cryptology and Cyber Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"A summary of Census II: Open source software application libraries the world depends on","year":"2025"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3133908"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3524610.3527923"},{"key":"ref4","article-title":"GOOGLE LLC v. ORACLE AMERICA, INC","year":"2025"},{"key":"ref5","article-title":"Does TikTok Live Studio Violate GPL v2?","author":"Team","year":"2025"},{"key":"ref6","article-title":"We\u2019ve filed a lawsuit challenging GitHub copilot, an ai product that relies on unprecedented open-source software piracy","author":"Butterick","year":"2025"},{"key":"ref7","article-title":"Overview: A brave new world of software piracy","author":"Saveri","year":"2025"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070520"},{"key":"ref9","first-page":"595","article-title":"A large-scale empirical study of open source license usage: Practices and challenges","volume-title":"IEEE\/ACM 21st Int. Conf. Mining Softw. Repositories.","author":"Wu","year":"2024"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1858996.1859088"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1370750.1370763"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2014.12.050"},{"key":"ref13","first-page":"116","article-title":"Tool support for open source software license compliance: The first two decades of the millennium","author":"Tuunanen","year":"2021"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.06.064"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3518994"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00175"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP58684.2023.00050"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.37"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-016-9487-8"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-14130-5_7"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134048"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SANER53432.2022.00059"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2643013"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2012.50"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2017.7"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-018-9614-9"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3643766"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2020.3016107"},{"key":"ref29","article-title":"International Organization for Standardization and International Electrotechnical Commission","year":"2020"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.5033\/ifosslr.v4i1.45"},{"key":"ref31","article-title":"Software bill of materials","year":"2021"},{"key":"ref32","article-title":"Software supply chain management","year":"2025"},{"key":"ref33","article-title":"Application security software (AppSec)","year":"2025"},{"key":"ref34","article-title":"Mend.io","year":"2025"},{"key":"ref35","article-title":"Software license management: What, why, how?","year":"2025"},{"key":"ref36","article-title":"Open-source license","year":"2025"},{"key":"ref37","article-title":"License proliferation","year":"2025"},{"key":"ref38","article-title":"2024 open source security and risk analysis (OSSRA) report","year":"2024"},{"key":"ref39","article-title":"License compatibility","year":"2025"},{"key":"ref40","article-title":"License compliance \u2013 A complete guide","author":"Filipsson","year":"2025"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-009-9180-1"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00070"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SANER60148.2024.00056"},{"key":"ref44","article-title":"License exceptions.\u201d Software Package Data Exchange","year":"2025"},{"key":"ref45","article-title":"GPL linking exception","year":"2025"},{"key":"ref46","article-title":"Guidelines for performing systematic literature reviews in software engineering","author":"Kitchenham","year":"2007"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2601248.2601268"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.04.001"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3114381"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1002\/cl2.1230"},{"key":"ref51","article-title":"ACM Digital Library","year":"2025"},{"key":"ref52","article-title":"IEEE Xplore Digital Library","year":"2025"},{"key":"ref53","article-title":"SpringerLink","year":"2025"},{"key":"ref54","article-title":"ScienceDirect","year":"2025"},{"key":"ref55","article-title":"dblp","year":"2025"},{"key":"ref56","article-title":"Google Scholar","year":"2025"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3171202"},{"key":"ref58","article-title":"ICORE Conference Portal","year":"2025"},{"key":"ref59","article-title":"CORE Journal Ranking Portal","year":"2025"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2009.5069483"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1504\/IJBIS.2011.042398"},{"key":"ref62","article-title":"Open source license compliance software for eradicating risks","year":"2025"},{"key":"ref63","article-title":"Government intervention, the rise of the SBOM and the evolution of software supply chain security","year":"2025"},{"key":"ref64","article-title":"License Policy Governance","year":"2025"},{"key":"ref65","article-title":"Black duck software composition analysis","year":"2025"},{"key":"ref66","article-title":"Open source license compliance","year":"2025"},{"key":"ref67","article-title":"Managing open source licenses","year":"2025"},{"key":"ref68","article-title":"Black duck: Managing deep license data","year":"2025"},{"key":"ref69","article-title":"Managing open source licenses","year":"2025"},{"key":"ref70","article-title":"Open source license compliance","year":"2025"},{"key":"ref71","article-title":"The license compatibility report","year":"2025"},{"key":"ref72","article-title":"License attribution for modified transitive dependencies","year":"2025"},{"key":"ref73","article-title":"Understanding risk score attribution and license analysis","year":"2025"},{"key":"ref74","article-title":"Creating policies for mend repository license checks","year":"2025"},{"key":"ref75","article-title":"Licenses and libraries API","year":"2025"},{"key":"ref76","article-title":"Application security for the AI era","year":"2025"},{"key":"ref77","article-title":"Custom rules for agent-based scanning","year":"2025"},{"key":"ref78","article-title":"Mitigate license risk with Veracode SCA","year":"2025"},{"key":"ref79","article-title":"Snyk","year":"2025"},{"key":"ref80","article-title":"Open source license compliance management","year":"2025"},{"key":"ref81","article-title":"Snyk license compliance management","year":"2025"},{"key":"ref82","article-title":"Checkmarx","year":"2025"},{"key":"ref83","article-title":"Generating a CxOSA scan results report - License risk and compliance","year":"2025"},{"key":"ref84","article-title":"Everything you need to mitigate open source risk","year":"2025"},{"key":"ref85","article-title":"Triaging SCA results","year":"2025"},{"key":"ref86","article-title":"Revenera","year":"2025"},{"key":"ref87","article-title":"Continuous open source software license compliance","year":"2025"},{"key":"ref88","article-title":"Automate attribution fulfillment via third-party notices generation","year":"2025"},{"key":"ref89","article-title":"Technical due diligence for mergers & acquisitions (M&A)","year":"2025"},{"key":"ref90","article-title":"JFrog","author":"Yaakov","year":"2025"},{"key":"ref91","article-title":"Get your license compliance reports with a click of a button","author":"Yaakov","year":"2025"},{"key":"ref92","article-title":"Managing compliance licenses","year":"2024"},{"key":"ref93","article-title":"Palo Alto Networks","year":"2025"},{"key":"ref94","article-title":"License compliance in software composition analysis (SCA)","year":"2025"},{"key":"ref95","article-title":"GitHub","year":"2025"},{"key":"ref96","article-title":"Dependabot quickstart guide","year":"2025"},{"key":"ref97","article-title":"Licensing a repository","year":"2025"},{"key":"ref98","article-title":"GitLab","year":"2025"},{"key":"ref99","article-title":"GitLab licensing and compatibility","year":"2025"},{"key":"ref100","article-title":"License approval policies","year":"2025"},{"key":"ref101","article-title":"Aqua cloud native security, container & serverless security","year":"2025"},{"key":"ref102","article-title":"5 open source licenses and compliance risks to know about","year":"2025"},{"key":"ref103","article-title":"What is open source security?"},{"key":"ref105","article-title":"LBY2001\/replication-package-of-OSS-license-SLR\/literature list","year":"2025"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-009-0054-z"},{"key":"ref107","article-title":"Fossology\/Fossology\/src\/nomos.\u201d GitHub","year":"2025"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.27.42"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.31.2"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360855"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2010.5463282"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2010.5609557"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME52107.2021.00059"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/3571852"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.19"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC.2017.62"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00150"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598085"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/IWESEP.2016.20"},{"key":"ref120","article-title":"Fossology\/Fossology\/Wiki\/Monk","year":"2025"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.111113"},{"key":"ref122","first-page":"270","article-title":"Understanding the usage, impact, and adoption of non-OSI approved licenses","author":"Meloca","year":"2018","journal-title":"IEEE\/ACM 15th Int. Conf. Mining Softw. Repositories"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1044"},{"key":"ref124","article-title":"SPDX license list","year":"2024"},{"issue":"2","key":"ref125","first-page":"101","article-title":"License tracing in free, open, and proprietary software","volume":"19","author":"Nordquist","year":"2003","journal-title":"J. Comput. Sci. Colleges"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/2018358.2018364"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2015.7332516"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-7099-1_5"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2023.719"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1145\/3640824.3640866"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2010.48"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/SEW.2012.24"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.73"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.29.296"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09936-2"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-08129-3_6"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-024-06069-x"},{"key":"ref138","first-page":"35","article-title":"Presenting software license conflicts through argumentation","volume-title":"Proc. 23rd Int. Conf. Softw. Eng. Knowl. Eng. (SEKE)","author":"Alspaugh","year":"2011"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion58688.2023.00050"},{"key":"ref140","article-title":"OSADL open source license checklists: OSADL - open source automation development lab EG","year":"2025"},{"key":"ref141","article-title":"OSSlab-pku\/reclicense\/backend\/app\/knowledgebase\/compatibi-lity_63.csv","year":"2025"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/FLOSS.2009.5071361"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2009.22"},{"key":"ref144","article-title":"IP license agreement: Sublicensing clause","year":"2025"},{"key":"ref145","article-title":"Choose an open source license","year":"2025"},{"key":"ref146","article-title":"Software licenses in plain English","year":"2025"},{"key":"ref147","article-title":"License show room","author":"Gao","year":"2025"},{"key":"ref148","article-title":"Copyleft","year":"2025"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2010.159"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2010.43"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2017.7884629"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/ASWEC.2018.00027"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-018-9650-5"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2900307"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387455"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1145\/3555051.3555068"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3528440"},{"key":"ref158","first-page":"40373","article-title":"CodeIPPrompt: Intellectual property infringement assessment of code language models","volume-title":"Proc. Int. Conf. Mach. Learn. (PMLR)","author":"Yu","year":"2023"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-66459-5_3"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645520"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2007.15"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/1985441.1985453"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2019.8667977"},{"key":"ref164","first-page":"1312","article-title":"OSLDetector: Identifying open-source libraries through binary analysis","volume-title":"Proc. 35th IEEE\/ACM Int. Conf. Automated Softw. Eng.","author":"Zhang","year":"2020"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2009.41"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1145\/1806799.1806824"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2015.32"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-016-9438-4"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM59687.2023.00012"},{"key":"ref170","article-title":"Stack exchange and stack overflow have moved to CC BY-SA 4.0","year":"2025"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1145\/1930488.1930533"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2012.03.033"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.5220\/0005775901290136"},{"key":"ref174","first-page":"811","article-title":"Assisting developers with license compliance","volume-title":"Proc. 38th Int. Conf. Softw. Eng. Companion","author":"Vendome","year":"2016"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2909021"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680339"},{"key":"ref177","first-page":"432","article-title":"Development success in open source software projects: Exploring the impact of copylefted licenses","volume-title":"Proc. Amer. Conf. Inf. Syst. (AMCIS)","author":"Colazo","year":"2005"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2005.38"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1002\/asi.21039"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2011.50"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2011.14"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2015.7332449"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1145\/3084381.3084410"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1145\/3125433.3125456"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2023.107391"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/SANER56733.2023.00064"},{"key":"ref187","first-page":"504","article-title":"Practical very large scale CRFS","volume-title":"Proc. 48th Annu. Meeting Assoc. Comput. Linguistics","author":"Lavergne","year":"2010"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"ref189","article-title":"Report of license proliferation committee and draft FAQ","year":"2025"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-023-10377-w"},{"key":"ref191","article-title":"OSADL open source license checklists","year":"2025"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE62328.2024.00013"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion66252.2025.00080"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2002.1019480"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884877"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00086"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00150"},{"key":"ref198","article-title":"GNU lesser general public license version 3","year":"2025"},{"key":"ref199","article-title":"Google maps platform terms of service","year":"2025"},{"key":"ref200","article-title":"Terms and conditions: This is the android software development kit license agreement","year":"2025"},{"key":"ref201","article-title":"BSD 3-Clause no nuclear license","year":"2025"},{"key":"ref202","article-title":"The JSON license","year":"2025"},{"key":"ref203","article-title":"Relicensing.\u201d LLVM Foundation","year":"2025"},{"key":"ref204","article-title":"LLAMA 3.2 community license agreement","year":"2025"},{"key":"ref205","article-title":"Deepseek-ai\/DeepSeek-Coder\/LICENSE-MODEL","year":"2025"},{"key":"ref206","article-title":"The difference between Xorg and XFree86","author":"Coopersmith","year":"2025"},{"key":"ref207","article-title":"Acquisition of sun microsystems by oracle corporation","year":"2025"},{"key":"ref208","article-title":"Contributor license agreement","year":"2025"},{"key":"ref209","article-title":"Developer certificate of origin","year":"2025"},{"key":"ref210","article-title":"CodeGen: An open large language model for code with multi-turn program synthesis","volume-title":"Proc. ICLR","author":"Nijkamp","year":"2023"},{"key":"ref211","article-title":"GitHub copilot\u00b7 your AI pair programmer","year":"2025"},{"key":"ref212","article-title":"ChatGPT","year":"2025"},{"key":"ref213","article-title":"GitHub trust center","year":"2025"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1109\/icse55347.2025.00052"},{"key":"ref215","article-title":"Participate in our community","year":"2025"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/11172729\/11072183.pdf?arnumber=11072183","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T04:40:01Z","timestamp":1758256801000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11072183\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9]]},"references-count":214,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/tse.2025.3586411","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9]]}}}