open source compliance: essential guidelines for risk-free adoption