@troed @jacqueline @hailey If the change is trivial, there is no copyright risk anyway.
If the change is significant, I hope you trust the author, because risks of them introducing harm thru code are much greater than risks of copyright shenanigans. You have evidence of their intent to put the code in project X under license Y. If you think that's not enough, have them state it explicitly. This does not need a lopsided contract, especially not one that gives you power to relicense proprietary.