Are there commercial FOSS projects that don't have CLAs?

I responded to

> any effort to bring in some OSS project as a dependency will be met with "Sure, it's open source now, but what about when...".

If you'd like to constrain that to commercial OSS projects it would be more compelling.

The alternative to a commercial OSS project is a commercial project without the OSS component. If the quality is perceived to be similar and the OSS license is no longer a factor then it might as well be closed source.

The comment you responded to began with the sentence:

>I think this damages all commercial OSS projects.