blackduck offers indemification assurance for enterprises and ISV's who are using open source software. They also have an ASP model so Novell partners can put blackduck into their service offerings.