3 papers
cs.SE2026
Don't Trust the Label: License Laundering in AI Supply Chains
James Jewitt, Hao Li, Gopi Krishnan Rajbahadur +2
AI artifacts move through a multi-platform supply chain, spanning datasets and models on Hugging Face and applications on GitHub. While each artifact carries a license whose obliga…
cs.LG2026
Permissive-Washing in the Open AI Supply Chain: A Large-Scale Audit of License Integrity
James Jewitt, Gopi Krishnan Rajbahadur, Hao Li +2
Permissive licenses like MIT, Apache-2.0, and BSD-3-Clause dominate open-source AI, signaling that artifacts like models, datasets, and code can be freely used, modified, and redis…
cs.SE2025
From Hugging Face to GitHub: Tracing License Drift in the Open-Source AI Ecosystem
James Jewitt, Hao Li, Bram Adams +2
Hidden license conflicts in the open-source AI ecosystem pose serious legal and ethical risks, exposing organizations to potential litigation and users to undisclosed risk. However…