How to Choose Open Source Packages for Business Software? A Guide to License Risk Mitigation and Architecture from MIT, BSD to Apache 2.0