That is a good idea and I'll check that but this is a large international company, (that bought my client) and I think they want to approve every single CPAN module/version separately.

If I am not mistaken, in addition to reading the license they might scan the source code as well to make sure it does not have dangerous material in it.