Typical risk patterns
GPL is high-risk when GPL code is combined into and distributed as one proprietary program. AGPL adds network-interaction source-offer obligations. LGPL is more permissive for library linking if its conditions are met. MIT/BSD/Apache are generally permissive but still require notices and, for Apache, patent/NOTICE compliance.