I've seen many other OSS projects ask contributors to sign CLAs. I've never seen us do that.
I assume it's not an issue, since people opening PRs generally understand what it means. But legally I'm sure there's some danger in taking an implied vs. explicit license to do something. So: Do we need to make people sign contributor CLAs? I'm betting Sean Owen knows something about this... :) Nick