Reviewed guide
Reading open-source licence signals
How to separate repository visibility, SPDX identifiers, OSI approval, and source-available terms when evaluating software.
Repository visibility answers whether source can be inspected. It does not answer what permission is granted. Start with the licence file and the normalized identifier recorded for the exact project revision.
An SPDX identifier makes licence naming consistent. OSI approval is a separate policy fact. OpenAlternative labels a project open source only when both the normalized classification and OSI approval support that conclusion.
Source-available licences can offer meaningful access while adding use restrictions that an OSI-approved licence would not. Treat that distinction as decision information, not as a judgement about project quality.