I was more thinking about making multiple projects with similar, intentionally vulnerable, code. I personally could see it being feasable, altough, as you said,

I was more thinking about making multiple projects with similar, intentionally vulnerable, code. I personally could see it being feasable, altough, as you said, not efficient. And yeah, i can see that attack vector (for legal action) through licenses as well.