So legal is going to tell you which NPM package to use in your NodeJS project? Is legal going to be sitting beside you when you're surfing github and see an awe

So legal is going to tell you which NPM package to use in your NodeJS project? Is legal going to be sitting beside you when you're surfing github and see an awesome library that just happens to have an Affero GPL license? If you're lucky, you'll have automated source scanning, legal will be informed after the fact, and you'll spend a week backing out the offending code and finding a replacement. What's more likely is that it will be shipped to production and sit there until someone notices or you get sued ;) Another one that likes to bite is the very not-open source Oracle extensions to open source Virtualbox / Vagrant... How many devs at big corps just click through that splash screen? Thinking legal is going to protect you is wishful thinking... Devs need to know the basics.