3 ms·

Now that is interesting. If you release a full Git repository, it may well contain a lot of information that is potentially PII. Names and email addresses may w

Now that is interesting. If you release a full Git repository, it may well contain a lot of information that is potentially PII. Names and email addresses may well be PII, commit timestamps might be as they may indicate someone's location. If you are releasing PII, GDPR comes into play if any of your contributers are European. Does your right to the source under a GPL type licence trump their right to privacy under GDPR. If you are arguing that full Git repository releases are necessary to meet GPL licence conditions, then I think you are making this argument

lmm 4y ago
> Does your right to the source under a GPL type licence trump their right to privacy under GDPR. If you are arguing that full Git repository releases are necessary to meet GPL licence conditions, then I think you are making this argument It's not that one trumps the other, it's that both are legal requirements. If your project is derived from GPLed code but you can't legally publish the source for other reasons then you can't legally distribute your project at all. Just like if you make a project that combines code that's under two incompatible licenses, it may just not be legally possible to distribute that project at all. (See e.g. the Wii versions of Freddi Fish etc., which had to be withdrawn from sale because they were distributing ScummVM-derived code without complying with the GPL). (Of course in practice, most likely you can scrub PII from a repository without making it any harder to do development. You just have to put a few minutes into fixing the problem instead of using it as an excuse)