You know anyone who's ever looked at the DND alignment chart knows that being "lawful" doesn't always mean good.

It's why being under an OSI licence isn't enough. Opening your code up isn't enough.

What kind of projects do folks want to belong to?

Do you understand the alignment of your Devs? Or don't you care because they "do good work".

The work needed to be done far earlier and by work I don't mean code.