> Particularly since so many companies don't even know all of the OSS they are using, and they often use OSS to offload the cost of maintaining it themselves.

Companies that market to the EU are going to need to find out real fast.