So, we should check if OpenBAO is then..? I assume this means the assigned copyright holder is a trusted non-commercial body (Apache or Linux Foundation).

I saw a similar thing happen with another product recently. It made me realise even though the project was touting itself as open source you couldn't even build the open code into a useable product.

So the importance of assigning copyright to a suitable body crystallised for me.