Everywhere I've worked in the last few years has license checking as part of CI pipelines. Our builds fail if GPL'd code is detected in some .jar or whatever. (fossology and x-ray both provide this)