Hacker News Reader

If the other developers did so without asking formal permission, then if the company was sued, they'll just pass it on to the developer.

The happy medium that I've found is to provide a list of acceptable licenses and let lead engineers audit that software to be included obey them.

View on HN

but still many licenses have legal requirements. i.e. I was working at a fortune 50 rare open source project, we had an acceptable license list but still all the source code needed to be audited for dependencies licenses and the legal team produced the license file to be included in distribution with all the notices as required by mit and apache

I tried very hard to negotiate that happy medium, but was shot down.

Reply on news.ycombinator.com