The threat to open source comes from within