On 25/06/2018 22:13, Michał Górny wrote: > If they really can't sign off that they are allowed to contribute, > then I indeed prefer them stopping contributing. That's certainly > better than learning one day that all their contributions were > illegal and we suddenly have to pull off all those packages. Good point. We could hope that as more projects get more careful about legal considerations, it won't be as much a surprise/special case for employers as it might be today. Or it might become a factor when choosing an employer. It'd be interesting to know if there are any examples of a project having to pull some code (and how say git history would have to be handled). Of course even lack of such examples would not be a reason against more attention to legal aspects of contributions. However, it may influence the timeline. Haste may indeed do more harm than good, but ignoring this doesn't seem to be the right long-term choice either. Paweł