We also do a less common thing that you should be aware of: We have build scripts that download 3rd party code from the source repositories or releases, apply patches to it, and build it into NuttX.That's fine as long as the licenses are not Category X.[2]
I would never permit anything that was not BSD or MIT into the repositories on into the build (and now Apache). It is our policy that there will be no licensing surprises to the end-user. There should be no concerns there.
