“Open-source advocates and enthusiasts need to get together, defining clear, standard terminology on how open-source software is built and communicate with a single voice,” says Thierry Carrez of the OpenStack Foundation.

Consider compliance from the start — no one thinks they’ll be asked for the bill of material for their software until lawyers step in.