Probably not because

a) he doesn't operate, market or deploy nmap in most instances. Doesn't consult or gives input at all.

b) He doesn't receive fees from using nmap on an ongoing basis

c) Nmap doesn't fall under financial laws which are stricter and require more to be in compliance with.