Component Licenses and Open Source Attribution