It would make more sence to make the code open source but not free - anyone can see but nobody can use the code.
The fingerprints have to be some sorts of data, like regular expressions or other limited instruction set which can only parse the incoming file and not communicate with outside world.
The company could automatically release fingerprints into the open after a time, say 6 months.
This seems like a pretty good business model idea though!