OSS Consultant & Developer · Open-Source Compliance · AI Governance
Bengaluru, India
I am an open-source software consultant and developer. I advise on open-source license compliance and dependency transparency — scanning codebases, identifying licenses and copyrights, assessing obligations, and producing accurate SBOMs and attribution notices.
As a developer, I build the tooling that makes this work repeatable and scalable. My current focus is extending governance practices to AI — applying the same rigour used for open-source components to AI models, datasets and their usage terms.
| Area | What it involves |
|---|---|
| OSS License Compliance | License identification, obligation analysis, copyright extraction, attribution and third-party notice files |
| SBOM & Supply Chain | SPDX and CycloneDX generation, dependency inventory, CBOM, software composition analysis |
| Code Scanning | ScanCode Toolkit, Snyk and FOSS scanning across Java, Python, JavaScript and C codebases |
| Compliance Automation | Tooling that turns dependency lists into scanned, reviewed and publishable compliance artifacts |
| AI Governance | Inventory of AI models and datasets, model license and usage-term review, policy-driven AI adoption |
| OSS Consulting | Compliance reviews, license policy guidance and remediation support for engineering teams |
Languages
Frameworks & Tools
Compliance & Security
-1F2937?style=flat-square){kind=icon}
|
AI Governance Application An application for governing the use of AI within an organisation — cataloguing AI models, datasets and services in use, tracking their licenses and usage terms, and supporting review workflows so AI is adopted responsibly and in line with policy. |
|
OSS Notice File Generator Takes a list of open-source dependencies, retrieves each package's source (Git, npm, PyPI, Maven, NuGet, crates.io, conda or purl), scans it with ScanCode Toolkit to extract actual copyright and license text, and produces a structured
|
License Scanning Assessments Compliance scans of real-world open-source projects — including Spring Boot, Undertow and util-linux — documenting detected licenses, copyright holders and resulting obligations, with findings prepared for legal and engineering review.
|