Finding #1: for the nnshark/gstshark issue, I've contacted gstshark: https://github.com/RidgeRun/gst-shark/issues/105

It is a fork of RidgeRun/gstshark, I'd first ask them to clarify the license.

Finding #4: Yes, there are a few projects intentionally licensed under Apache 2.0; where users are expected to use/update/include it directly, not linking as a shared library. In such cases, LGPL will be a roadblock against commercial embedded devices.

I'll keep looking at other Findings, too.

Thanks a lot!