"Made by a nameless guy in a shack in oregon" is something you never want your auditor to hear. If you are a business buying software from a business, sure. Bu

"Made by a nameless guy in a shack in oregon" is something you never want your auditor to hear. If you are a business buying software from a business, sure. But if you are anyone getting your OSS from the guy in Oregon, sure. The goal here seems to be shielding larger companies when they use 3rd party OSS. Exploitation at its finest. Besides, what about EULAs and other liability limiting license terms?