Licensing Review
Document the licensing model and expected disclosures associated to components in use, including open source (OSS).
With the rise of open-source libraries and components, it is a common misunderstanding that open-source is equivalent to unlicensed. This is not the case, as there are multiple licensing models and disclosure requirements for open-source components. Free applies only to the cost and does not negate the license aspect indepedently.
Provided in reports, dashboards, and can be integrated with other tools.
While informational, if an existing About or EULA is provided, the review can verify and/or modify these required documents.
A comprehensive licensing review is not possible without an SCA. The output of the SCA is one of the inputs to a licensing review.