There is also risk of someone taking project and undercutting your income. Like with Elastic and cloud.

I have opensource project under very liberal license, but never published build script and unit tests. Most people do not even notice, they just check license.