That sounds like the opposite problem from releasing open source code. I would imagine one of NASA's concerns is ensuring none of the code reveals classified information. Another risk (this one for anyone thinking about publishing their code) is that it turns out to infringe on some obscure patent - though I'm not sure if it would be easier or harder to get a settlement from NASA than a private business. (So yes, "Liability." is still a possible reason.)