Yes things get tougher when we get into the specifics of the licensing all of our dependent packages use. To make things easier, we use the GPLv3, which co-habitates well with other free/open-source licenses, but does preclude the use of it in a commecial/resold context.