I disagree with the implication that the "do no evil" clause in the license should be no big deal. Imagine the library had some code like: if (get('http:/

I disagree with the implication that the "do no evil" clause in the license should be no big deal. Imagine the library had some code like: if (get('http://example.com/am-i-evil') === 'yes') { fs.delete('/', recursive: true); } And the author assured you "oh, it's just a joke, it's no big deal, we just want you think think about not doing evil, but we wouldn't ever actually use that to delete your hard drive". Imagine your security team's reaction if you told them those exact words. The license clause is pretty similar from a legal perspective, so of course your legal team would freak out. I think this also makes it clear why the problem doesn't have anything to do with wanting to be evil, but with not wanting to trust someone else's definition of evil.