I couldn't possibly comment. This would be close to me breaking NDA ground here, so sorry about that. I know that the legal department took software licensing very seriously and we had a narrow range of licenses we could use.
NDA on open source libraries? Don't those licenses usually require attribution at the very least? Where can we find the license file? Surely JD is complying with license requirements, which would require disclosing the libs used...
I don't think it's fair to assume an ex-employee knows the details of the software licenses or where to find them. If he knows more concrete details (like a link to the license file) I imagine he would share, but otherwise invoking NDA is a safety measure to avoid sharing potentially incorrect/outdated info.
