You should check the provenance and licenses of your dependencies -- I bet there's a few irrational gifts in there from the nerds in the "open source" community ;)

Or, in SVese: are you a taker or a maker?