6 ms·
Previous company went through source code audit during acquisition. Auditor inevitably found code from Stack Overflow. Their guidance, which got us a passing
by brown 6y ago
Previous company went through source code audit during acquisition. Auditor inevitably found code from Stack Overflow. Their guidance, which got us a passing grade, was to just include links to the SO answer and link to CC in a nearby comment in the code.
This is not legal advice, just sharing our story.
- zvr 6y agoThat's strange. By including the link you satisfy the "BY" obligation of the license; but what about the "SA" one? Unless your code was being released under an open source license. As parent said, this is not legal advice -- ask someone qualified to answer.
- whereistimbo 6y agoI wonder how this applies on proprietary code? Should the attribution be added in documentation or third party notices?
- shishy 6y agoOut of curiosity, how does the audit work? Do they have automated tools to check against open source code bases and SO snippets or is it manual? Interesting nonetheless...
- zvr 6y agoYes, there are a number of tools that analyze source code and compare it with "all known source code on the Internet". They usually produce list of matches. For less-than-complete-file matches, usually human review and decision is needed.