"legal contract/framwork to handle all the incidentals of using the open source project" This is the point missing.