Except when you contribute to open-source, you typically have a legal document (the licence) that explains how the exposure will be paid.