3 ms·
Well, I have as part of my job duties scanned dependencies of source code to make sure it didn’t inadvertently include any GPL-licensed libraries. The GPL does
by strenholme 7y ago
Well, I have as part of my job duties scanned dependencies of source code to make sure it didn’t inadvertently include any GPL-licensed libraries.
The GPL does not control use, it controls distribution. So, using Emacs and GCC as one’s toolchain does not require a company’s code being made open source.
However, using a GPL licensed library “taints” any and all code which touches it. With the complex mazes of dependencies modern NPM/Node, Java/Maven, Python/Pip, and what not have, there’s a non-zero chance that some dependency of a dependency of a dependency is GPL code without the company knowing about it, which puts the company at risk of being sued if they make the code depend on that GPL library, no matter how indirectly.
Anything a GPL library touches in a bundled executable taints the entire code, forcing it all to be open source.
This is a serious problems for companies selling software (including hardware that uses embedded software). There are commercial products which exist to make sure code is not GPL-tainted.
- kragen 7y ago> This is a serious problems for companies selling software (including hardware that uses embedded software). There are commercial products which exist to make sure code is not GPL-tainted. Many companies selling hardware that uses embedded software find it easier to simply comply with the GPL, thus protecting the users' rights to some extent. The cost of compliance is far smaller than the benefits available from drawing on the world of free software. If we can get more free-software developers to change the licenses of new versions of their software to the GPL, we can increase those benefits and influence more companies to choose GPL compliance instead of GPL avoidance. Even some companies that sell software choose GPL compliance. Unfortunately, the GPLv2 is not strong enough to prevent "Tivoization", in which the users can obtain copies of the source code but cannot install modified versions on their own devices, even though theoretically they own those devices — in these cases the benefits of free software become impossible for the users to obtain in practice. This is a major reason why the GPLv3 was written.
- mikeeusa5 7y ago>Anything a GPL library touches in a bundled executable taints the entire code, forcing it all to be open source. How is it that I can tell that you are a layman idiot, and also a white? Ask yourself: is my code that links to a GPL library a non-separable work. And is my code that links to a GPL library derived from that library? No and No. Sure: you may be sued. But the copyright holder of the GPL'd library will not likely win. These are simple concepts. Are you white programmers dumb idiots? Note: Copyright holders of GPL'd software don't even sue blatant violators such as GRSecurity and Brad Spengler ( https://perens.com/2017/06/28/warning-grsecurity-potential-contributory-infringement-risk-for-customers/ https://perens.com/2017/06/28/warning-grsecurity-potential-c... ) who create violating non-separable directly derivative works, adding no-redistribution-or-else additional restrictions to the work in blatant violation of section 6 of the license (GPLv2).
- wiz21c 7y agoNot to nitpick but : >>> This is a serious problems for companies selling software No. It is a serious problem for companies trying to make proprietary software. That's quite different. The monetary aspect of the question is independent of that. That is, you can perfectly sell GPL programs. What you can't do is prevent competitors and users of reusing it the way they want to. GPL is a stance against proprietary software, not commercial software. (now, I'll readily admit that this seriously undermines many commercial prospects, but that's just a consequence)