Kuhn: It Matters Who Owns Your Copylefted Copyrights

I imagine that a decent start is to collect stats based on incidents others already report spontaneously to the Conservancy or they otherwise are made aware of. Rather than relying only on very time internal investigations and exploratory work.

Still, I agree that collecting and publishing the data may consume precious time for the Conservancy. On the other hand, whoever does it would have to have some level of both credibility and notability, otherwise the work may not be known and few will provide those necessary external incident reports. A bit of chicken and egg problem.