I don't see how this is a problem, to be honest. If the company is using the software, its licensed must already be reviewed. Unless they're submitting code that links to company-made one, contributing does not come with additional license obligations.