Counterpoint: usually there is no spec, and you have to look at the actual tool to figure out what's going on. For closed-source binaries there's a clear escala

Counterpoint: usually there is no spec, and you have to look at the actual tool to figure out what's going on. For closed-source binaries there's a clear escalation between "run the tool and see what it seems to do" and "disassemble the code to really know" (which is supposed to ), but with open-source, the source code is just there to steal. We known open-source theft (in the non-ironic sense) is common. And we know at least one of the Rust repos had to have its history rewritten due to a license violation of some sort. It isn't a major jump to assume there's GPL-violation in the tool-rewrites too.