System and method for checking open source usage

摘要

A method, system and computer program product, the method comprising: receiving a characteristic of a source code entity to be checked; comparing the characteristic of the source code entity to be checked to characteristics stored in a repository; and subject to determining with at least a first probability that the characteristic of the source code entity to be checked is found in the repository, providing an indication of an open source library associated with the characteristic, wherein the source code entity to be checked is not received with the characteristic.

主权项

1. A computer-implemented method comprising:
receiving a first characteristic of a first source code entity to be checked and a second characteristic of a second source code entity to be checked; comparing the first characteristic to characteristics stored in a repository representing an open source library; comparing the second characteristic to the characteristics stored in the repository; based on comparing the first characteristic to the characteristics stored in the repository, determining a first probability indicating that the first source code entity contains code from the open source library; based on comparing the second characteristic to the characteristics stored in the repository, determining a second probability lower than the first probability, wherein the second probability indicates that the second source code entity does not contain code from the open source library; determining, due to the first probability indicating that the first source code entity contains code from the open source library, that the second source code entity also contains code from the open source library; and providing an indication of the open source library, wherein the first source code entity and the second source code entity are not received with the first characteristic or the second characteristic.