Those 250 packages likely don't have custom forks of the GPL license. Handling of legal requirements for each package should be templatable by management based on whether a particular package is GPLv2, GPLv3 or AGPLv3 and has a linking exception.