4 ms·

Not sure what difference this makes. The GPL is binding at the point where someone ships a release. They aren't obligated to ship the details of every internal

by not2b 4y ago

Not sure what difference this makes. The GPL is binding at the point where someone ships a release. They aren't obligated to ship the details of every internal partial version, which might even include things that can't be legally shipped (confidential information, for example), which is what a complete git history would contain.

lmm 4y ago
> Not sure what difference this makes. If you're shipping something derived from other people's copyrighted work, you need a license and so you need to comply with the terms of that license. If you're shipping something that you hold the copyright on, then you don't need anyone's permission and aren't obliged to follow any license terms. > They aren't obligated to ship the details of every internal partial version, They are obliged to ship "the preferred form of the work for making modifications to it." I would think that for most contemporary development workflows (where one is accustomed to using blame/bisect/etc. during development) that would be a git repository. > which might even include things that can't be legally shipped (confidential information, for example), which is what a complete git history would contain. That's their problem. You don't get an exemption from the GPL just because complying is difficult.
- steve_gh 4y ago
  Now that is interesting. If you release a full Git repository, it may well contain a lot of information that is potentially PII. Names and email addresses may well be PII, commit timestamps might be as they may indicate someone's location. If you are releasing PII, GDPR comes into play if any of your contributers are European. Does your right to the source under a GPL type licence trump their right to privacy under GDPR. If you are arguing that full Git repository releases are necessary to meet GPL licence conditions, then I think you are making this argument
  - lmm 4y ago
    > Does your right to the source under a GPL type licence trump their right to privacy under GDPR. If you are arguing that full Git repository releases are necessary to meet GPL licence conditions, then I think you are making this argument It's not that one trumps the other, it's that both are legal requirements. If your project is derived from GPLed code but you can't legally publish the source for other reasons then you can't legally distribute your project at all. Just like if you make a project that combines code that's under two incompatible licenses, it may just not be legally possible to distribute that project at all. (See e.g. the Wii versions of Freddi Fish etc., which had to be withdrawn from sale because they were distributing ScummVM-derived code without complying with the GPL). (Of course in practice, most likely you can scrub PII from a repository without making it any harder to do development. You just have to put a few minutes into fixing the problem instead of using it as an excuse)

by not2b 4y ago

lmm 4y ago

> Not sure what difference this makes. If you're shipping something derived from other people's copyrighted work, you need a license and so you need to comply with the terms of that license. If you're shipping something that you hold the copyright on, then you don't need anyone's permission and aren't obliged to follow any license terms. > They aren't obligated to ship the details of every internal partial version, They are obliged to ship "the preferred form of the work for making modifications to it." I would think that for most contemporary development workflows (where one is accustomed to using blame/bisect/etc. during development) that would be a git repository. > which might even include things that can't be legally shipped (confidential information, for example), which is what a complete git history would contain. That's their problem. You don't get an exemption from the GPL just because complying is difficult.

steve_gh 4y ago
Now that is interesting. If you release a full Git repository, it may well contain a lot of information that is potentially PII. Names and email addresses may well be PII, commit timestamps might be as they may indicate someone's location. If you are releasing PII, GDPR comes into play if any of your contributers are European. Does your right to the source under a GPL type licence trump their right to privacy under GDPR. If you are arguing that full Git repository releases are necessary to meet GPL licence conditions, then I think you are making this argument
- lmm 4y ago
  > Does your right to the source under a GPL type licence trump their right to privacy under GDPR. If you are arguing that full Git repository releases are necessary to meet GPL licence conditions, then I think you are making this argument It's not that one trumps the other, it's that both are legal requirements. If your project is derived from GPLed code but you can't legally publish the source for other reasons then you can't legally distribute your project at all. Just like if you make a project that combines code that's under two incompatible licenses, it may just not be legally possible to distribute that project at all. (See e.g. the Wii versions of Freddi Fish etc., which had to be withdrawn from sale because they were distributing ScummVM-derived code without complying with the GPL). (Of course in practice, most likely you can scrub PII from a repository without making it any harder to do development. You just have to put a few minutes into fixing the problem instead of using it as an excuse)