Over 10% of Python packages on PyPI are distributed without a license
CYBERSECURITY FEATURED ANALYSIS

Over 10% of Python packages on PyPI are distributed without a license

SOURCE

Blog RSS Feed | Snyk

DATE

READ

1 min read

Imagine that you installed a random Python package from PyPI. There’s a good 13.5% chance that the package has no licensing information. Considering it’s not uncommon to have hundreds of dependencies and sub-dependencies …

Imagine that you installed a random Python package from PyPI. There’s a good 13.5% chance that the package has no licensing information. Considering it’s not uncommon to have hundreds of dependencies and sub-dependencies in a typical Python application, there’s a very good chance of using unlicensed code. Depending on the context, the consequences of using unlicensed software could be anywhere from insignificant to disastrous. Ok, that’s a wild range, so this post will dig deeper into this issue.