The OSMF is currently working on updated Attribution Guidelines, which should go some way to address some of this, and will probably adopt something within the next month or two.

So the situation is currently fluid.