The No Fakes Act Has a “Fingerprinting” Trap That Kills Open Source