Avoiding pitfalls of open-source licence risks