There's a unwritten framework regulating it, unwritten but enforced by selective C&D. I think that's how a lot of industries work anyway, see Oracle v. Google drama on use of Java in Android.