It goes without saying that this is annoying and expensive (over $100,000 for over half the respondents and over $500,000/year for over a quarter!) for those wh

It goes without saying that this is annoying and expensive (over $100,000 for over half the respondents and over $500,000/year for over a quarter!) for those who have been audited, even if they have done nothing wrong. I am curious what fraction of auditees did do something wrong. At that sort of expense, it seems like many companies could probably do better to hire a single engineer to contribute to open-source Java and prioritise their needs. Of course, the ever-present temptation would be to lay him off and freeload.