I think you misunderstood the question. I guess its only open-weights not open-source then.

For some insight into the original question, take a look at the Debian ML policy:

https://salsa.debian.org/deeplearning-team/ml-policy