[VirenM]

> the company analyzes the customer's code to see what open source software it depends on, and what open source projects those programs depend on.

I'm sure fortune 500 companies will be alright with Tidelift analyzing their proprietary code.

[justincormack]

People already do to make sure they are complying with licenses and not using licenses they dont approve.

[pwang]

Yep, F500 companies bring in all sorts of external tools to look at their source code, for compliance, security, etc.