The other way to avoid this would be to lean copyleft for your own codebase(s). If they're made public and you include the appropriate source code references f

The other way to avoid this would be to lean copyleft for your own codebase(s). If they're made public and you include the appropriate source code references for the dependencies you rely on, then you should be in the clear legally (and perhaps morally, although that's a separate topic).