@futureisfoss @ThePSF
Was thinking IF this gets proper attention (open source repositories hosters without a formal relationship with a vendor using it, don't get legal liability) ...

It works the other way around also?

If a vendor don't want the liability risc, it just needs to support OSS development and use that instead of proprietary software to avoid it ...

Think I could live with that.