Blog
Posts on open source license compliance, security, and policy trends, drawn from cases and news encountered in day-to-day practice. Listed newest first.
AI-Generated Code: How Far Should Open Source Scanning Go?
June 8, 2026 in Blog
Examines whether AI-generated code needs snippet-level open source license scanning, laying out the decision criteria from public sources and distinguishing this from the security vulnerability angle.
Rockchip and FFmpeg: A License Dispute Case Study
February 20, 2026 in Blog
Categories:
Note This article was written using Claude Code, and the key facts cited were cross-verified against primary sources. It reflects the author’s personal analysis and summary, not legal advice, and legal determinations such as whether …
The AVM Lawsuit: Revisiting LGPL-2.1 User Rights and the Obligation to Provide Installation Information
January 13, 2025 in Blog
Categories:
This post is based on Ars Technica’s article “German router maker is latest company to inadvertently clarify the LGPL license”. The article covers the details of the lawsuit between AVM and Sebastian Steck and the importance of …
Key Points of the EU's Three Major Digital Regulations That Korean Software Companies Need to Know
November 12, 2024 in Blog
Categories:
Introduction Three major pieces of legislation the European Union (EU) has recently introduced carry very significant implications for Korean companies. The Product Liability Directive (PLD), the Cyber Resilience Act (CRA), and the AI Act present a …
To Mine or Not To Mine: A German Court's Ruling on the Copyright Dilemma of the AI Era
November 6, 2024 in Blog
Categories:
This post is based on JBB Rechtsanwält:innen’s blog post “To Mine or Not To Mine” (https://jbb.de/to-mine-or-not-to-mine/) and is published to explain a recent German court ruling on text and data mining (TDM) and to share related …
A Chinese Copyright Infringement Case: "Since GPL-Based Software Products Already Have an Obligation to Disclose Source Anyway, Isn't It Fine to Copy Them?"
September 23, 2024 in Blog
Categories:
As the use of open source software has spread widely, the legal issues surrounding it have grown increasingly complex. In particular, the question of copyright over derivative works based on open source projects that use a copyleft license such as …
Introduction to SPDX 3.0 and Enterprise Adoption Strategy
September 6, 2024 in Blog
Categories:
1. Introduction to SPDX 3.0 SPDX (Software Package Data Exchange) is an open standard for communicating software component, license, copyright, and security information in a standardized way. SPDX 3.0 is the latest version of this standard, released …
Elasticsearch Changes Its License Again: How Should Companies Respond?
September 6, 2024 in Blog
Categories:
Introduction: The Background of the Elasticsearch License Elasticsearch began as an open source project and has since gone through several changes in licensing policy. Initially it was distributed under the Apache 2.0 license, but in 2021 Elastic …
French Court Orders Major Telecom Orange to Pay Damages for GPL Violation
February 19, 2024 in Blog
Hello. Today I want to look at a case in which a French court ordered the telecom company Orange to pay damages for violating the GPL. This case seemed especially worth noting for two main reasons. First, the defendant in this case is Orange, a major …
Effective Open Source Management Practices for Companies (2): OpenChain Korea Work Group
April 3, 2023 in Blog
In the previous post, I introduced the OpenChain Project for global collaboration as an effective open source management practice for companies. This time, I would like to introduce the OpenChain Korea Work Group, a collaborative community for Korean …