nomulus

You can escalate to legal for edge cases, but you should be able to handle base cases yourself. As an example, I work at Google on an Apache 2.0-licensed open source project, and we have dozens of third party dependencies: https://github.com/google/nomulus/blob/master/core/build.gra... It wouldn't remotely scale across Google if we had to escalate to legal every single time we pulled in a new dependency. Instead, there's a company-wide allowlist of accepted software licenses, and you only need legal help for exceptions beyond that. So yes, we do have to know some basics of software licensing. It's just part of being a SWE.

There were a lot of people who thought like you and thought they could just whip up some perl scripts to do it. Then they all got hacked, and since when you hack a domain registry, you hack every domain it manages too, they'd usually snag a google.whatever domain and say haha we hacked google. Eventually Google got so angry about this happening that they sent a crack team of security experts to build a top-level domain registry the right way, and made it open source. https://github.com/google/nomulus It wasn't easy.