> Do big companies actually do enough due dilligence to know? I was talking to a company about a role, and one of their ex-employees warned me that one reason

> Do big companies actually do enough due dilligence to know? I was talking to a company about a role, and one of their ex-employees warned me that one reason they'd left was that the company required contact with shitty upstream communities that make contributors' lives very unpleasant. I passed on that role, and one item I carried from the experience was that in discussions about a subsequent employer's open source contribution was that we needed to make sure that we weren't expecting people to deal with upstreams whose behaviour would be drive our staff out, or give them grounds for legal action against us. So yes.