Yeah, that might be true. But if you are a big organization you probably want to have a standardized process on how to handle third party open source software (how to document it, where to store it, etc...).