Every software engineering lead has lived through the moment: a developer pulls in a convenient open-source library on a Friday afternoon, only for the corporate legal team to discover months later that a transitive dependency deep in the tree carries a restrictive license that clashes with...