Re: code vs. binaries, it depends on the license. Another commenter has been pointing out that Google forbids any use of AGPL projects, period [1] because its definition of "linking" includes communication over a network.

Of course everything should be vetted, but lawyers have canned advice about common licenses they see often — GPL, MIT, etc.

[1] https://opensource.google/documentation/reference/using/agpl...