{"id":"https://openalex.org/W7165617021","doi":"https://doi.org/10.48550/arxiv.2606.23495","title":"Ensuring Open Source Integrity: The Intersection of Copy-Based Reuse and License Compliance","display_name":"Ensuring Open Source Integrity: The Intersection of Copy-Based Reuse and License Compliance","publication_year":2026,"publication_date":"2026-06-22","ids":{"openalex":"https://openalex.org/W7165617021","doi":"https://doi.org/10.48550/arxiv.2606.23495"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.23495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.23495","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031441008","display_name":"Mahmoud Jahanshahi","orcid":"https://orcid.org/0000-0003-4408-1183"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jahanshahi, Mahmoud","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139209969","display_name":"Bogdan Vasilescu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vasilescu, Bogdan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139204178","display_name":"Audris Mockus","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mockus, Audris","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.8378000259399414,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.8378000259399414,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.12389999628067017,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.006200000178068876,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/license","display_name":"License","score":0.9078999757766724},{"id":"https://openalex.org/keywords/copying","display_name":"Copying","score":0.8234000205993652},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.7329999804496765},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.642300009727478},{"id":"https://openalex.org/keywords/code-reuse","display_name":"Code reuse","score":0.6270999908447266},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5792999863624573},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4262999892234802}],"concepts":[{"id":"https://openalex.org/C2780560020","wikidata":"https://www.wikidata.org/wiki/Q79719","display_name":"License","level":2,"score":0.9078999757766724},{"id":"https://openalex.org/C2779151265","wikidata":"https://www.wikidata.org/wiki/Q1156791","display_name":"Copying","level":2,"score":0.8234000205993652},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.7329999804496765},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7099000215530396},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.642300009727478},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.6270999908447266},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5792999863624573},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4474000036716461},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4262999892234802},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.41130000352859497},{"id":"https://openalex.org/C174183944","wikidata":"https://www.wikidata.org/wiki/Q334661","display_name":"MIT License","level":3,"score":0.39169999957084656},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.3864000141620636},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3684999942779541},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.3596999943256378},{"id":"https://openalex.org/C512654426","wikidata":"https://www.wikidata.org/wiki/Q19652","display_name":"Public domain","level":2,"score":0.353300005197525},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.34689998626708984},{"id":"https://openalex.org/C2777063073","wikidata":"https://www.wikidata.org/wiki/Q1553237","display_name":"Settlement (finance)","level":3,"score":0.33880001306533813},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.2904999852180481},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.23495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.23495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.42129752039909363,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"other":[1,21,129],"creative":[2],"work,":[3,15],"source":[4,34,70,102],"code":[5,35,79,113,135],"is":[6,115],"protected":[7],"by":[8,117],"copyright.":[9],"The":[10],"owner":[11],"can":[12,36],"license":[13,31,57,96,185],"the":[14,60,66,92,99,118,159,218,227],"e.g.,":[16,42],"to":[17,53,90,110,188],"permit":[18],"copy":[19],"and":[20,25,87,144],"kinds":[22],"of":[23,62,68,94,149,170,179,194,214,229],"use,":[24,173],"even":[26],"start":[27],"legal":[28],"proceeding":[29],"against":[30],"violators.":[32],"However,":[33],"be":[37],"reused":[38],"in":[39,72,136,233],"subtle":[40],"ways,":[41],"via":[43,223],"copying":[44,84,114],"without":[45],"explicit":[46],"package":[47],"manager":[48],"dependencies,":[49],"making":[50],"it":[51,89,126],"hard":[52],"reason":[54],"about":[55],"potential":[56,95,184,198],"noncompliance.":[58],"Using":[59],"World":[61],"Code":[63],"infrastructure":[64],"approximating":[65],"entirety":[67],"open":[69,101],"software,":[71],"this":[73],"paper":[74],"we":[75,106],"create":[76],"a":[77],"copy-based":[78,180,190,219,235],"reuse":[80,150,215],"network":[81,220],"mapping":[82],"direct":[83],"across":[85,98,151],"projects,":[86],"use":[88],"quantify":[91],"extent":[93],"noncompliance":[97,186,199],"entire":[100],"ecosystem.":[103],"In":[104,154],"addition,":[105],"estimate":[107],"regression":[108],"models":[109],"understand":[111],"whether":[112],"affected":[116],"origin":[119],"project's":[120],"license,":[121],"and,":[122],"if":[123],"so,":[124],"how":[125],"varies":[127],"with":[128,138,176,192],"project":[130,195],"characteristics.":[131],"We":[132],"find":[133],"that":[134,211],"repositories":[137],"permissive":[139],"licenses,":[140,157,166],"such":[141],"as":[142],"MIT":[143],"Apache,":[145],"shows":[146],"higher":[147],"likelihood":[148,178],"programming":[152],"languages.":[153],"contrast,":[155],"copyleft":[156],"like":[158],"GPL,":[160],"exhibit":[161],"mixed":[162],"effects.":[163],"Public":[164],"domain":[165],"despite":[167],"their":[168],"aim":[169],"allowing":[171],"unrestricted":[172],"are":[174,204],"associated":[175],"lower":[177],"reuse.":[181,236],"A":[182],"widespread":[183],"appears":[187],"accompany":[189],"reuse,":[191],"39.4%":[193],"combinations":[196],"at":[197],"risk,":[200],"particularly":[201],"when":[202],"licenses":[203],"unclear":[205],"or":[206],"absent.":[207],"Our":[208],"findings":[209],"reveal":[210],"only":[212],"2.43%":[213],"detected":[216],"through":[217],"was":[221],"discoverable":[222],"dependency":[224],"analysis,":[225],"highlighting":[226],"limitations":[228],"existing":[230],"dependency-tracking":[231],"tools":[232],"capturing":[234]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-24T00:00:00"}
