Hacker News Reader

Not even AI driven is fine, "just" match against a large corpus of known open source software.

Nah it has to be AI driven these days to get approval from management.

“Known open source”

But who will check the licences of those softwares to build the corpus?

A good start would be to crawl github and sourceforge. Most have license data. BlackDuck has a scanner with a corpus, don’t know how good it is.