Stealing code isn't at issue here, the scenario is that developers are not incorporating new timezone data because the open-source license for that data is only printed the README, not in the timezone data file itself. This is the sort of thing I'm calling anal.