General
7 min
How Open Source License Scanning Evolved From SPDX to Policy Gates
License scanning went from hand-checking COPYING files to SPDX metadata and policy-as-code gates. This piece traces that arc, shows which gaps still let copied code slip through, and explains how to pair license scans with source matching for audit-grade evidence.