Exactly why I started relicensing all of my projects under MPL-2.0. The decision followed an attempt by a webpack team member to wholesale copy a project of mine into the project without attribution or licensing (which is a separate issue). Decided then and there that I needed something more restrictive that still allowed for collaboration.