This is why CC0 and MIT matter for projects people depend on. Once you build on something with a restrictive license this is always a risk.