一句话：首次实证研究 PyPI 许可证变体，并提出基于 diff 与大模型的 LV-Parser 与 LV-Compat 检测许可不兼容。
开源许可证是软件复用的法律基础，但包括修改版标准许可证与自定义许可证在内的许可证变体带来了显著的合规复杂性。这类变体在现代软件系统中普遍存在却缺乏理解，现有工具也完全未考虑其存在，导致许可证分析在有效性与效率上均面临挑战。为填补这一空白，作者对 PyPI 生态中的许可证变体开展了大规模实证研究，发现文本层面的差异十分常见，但仅 2% 涉及实质性修改；然而这些变体确实引发严重合规问题，其下游依赖中有 10.7% 被判定为许可不兼容。受此启发，作者提出 LV-Parser，利用基于 diff 的技术与大语言模型高效分析许可证变体，并构建 LV-Compat 自动流水线以检测软件依赖网络中的许可不兼容。评估显示 LV-Parser 准确率达 0.936，同时将计算成本降低 29%；LV-Compat 检出的不兼容包数量是现有方法的 5.2 倍，精度为 0.98。
Open-source licenses establish the legal foundation for software reuse, yet license variants, including both modified standard licenses and custom-created alternatives, introduce significant compliance complexities. Despite their prevalence and potential impact, these variants are poorly understood in modern software systems, and existing tools do not account for their existence, leading to significant challenges in both effectiveness and efficiency of license analysis. To fill this knowledge gap, we conduct a comprehensive empirical study of license variants in the PyPI ecosystem. Our findings show that textual variations in licenses are common, yet only 2% involve substantive modifications. However, these license variants lead to significant compliance issues, with 10.7% of their downstream dependencies found to be license-incompatible. Inspired by our findings, we introduce LV-Parser, a novel approach for efficient license variant analysis leveraging diff-based techniques and large language models, along with LV-Compat, an automated pipeline for detecting license incompatibilities in software dependency networks. Our evaluation demonstrates that LV-Parser achieves an accuracy of 0.936 while reducing computational costs by 29%, and LV-Compat identifies 5.2 times more incompatible packages than existing methods with a precision of 0.98. This work not only provides the first empirical study into license variants in software packaging ecosystem but also equips developers and organizations with practical tools for navigating the complex landscape of open-source licensing.
@inproceedings{paperbot11622,
title = {Small Changes, Big Trouble: Demystifying and Parsing License Variants for Incompatibility Detection in the PyPI Ecosystem},
author = {Weiwei Xu and Hengzhi Ye and Kai Gao and Minghui Zhou},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3744916.3773157}
}