I am not a lawyer and neither is anyone you are likely to get to respond here. If your company has a legal team, I'm pretty sure they would prefer you ask them rather than the internet. With that said...
On the first statement, this sounds very clearly insane. More importantly, I would assume that if it *were* correct, you posting the question here would provide a record showing that you and your company violated the license and so posting here (if the entire idea wasn't crazy) would open you up to lawsuits.
On the second (VIPM package which is GPL), as I understand it this means you must make your code open source.
Take a look at https://choosealicense.com/ for the alternatives. An important distinction is between the GPL and LGPL.