{Understanding and auditing the licensing of open source software distributions}