The package sources are not required to install or run the software. Users wishing to manipulate/update the package would be much better served installing Cygwin (without OpenSSH for Windows installed - do not mix the two).
Cygwin is licensed under the GPL.
OpenSSH is licensed under a BSD license.