FOSSA License Compliance Gap When Dependencies Include Dual-Licensed Libraries
Dual-licensed open source libraries create a structural challenge for software composition analysis (SCA) tooling. When a dependency offers multiple licenses and the user must choose which terms to follow, automated scanners face a fundamental ambiguity: they can detect every license present, but they cannot determine which license governs a specific project’s use without additional context….