FOSS Compliance: Who Does What – Roles and Responsibilities