It’s hard to find but contributors are required to sign a CLA which allows the project owner to do what they want with the code.

https://www.audacityteam.org/cla/