User beware: Modified AGPLv3 removes freedoms, adds legal headaches

• scancode-toolkit

  4 1,973 9.6 Python

  :mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  

Hey, pabs3! Actually this is not using a rolling checksum for detection but rather a combo of language model, checksums, automatons, bitvectors, inverted indexes and multiple sequences alignment (e.g. a specialized diff). I put some docs there to explain the approach at ahttps://github.com/nexB/scancode-toolkit/blob/develop/src/li...

• Neo4j

  50 12,486 9.9 Java

  Graphs for Everyone

  

That's what Neo4j did, they took the AGPL and added a Commons Clause making it AGPL with Commons Clause.

They then say:

> Neo4j Enterprise consists of modules from Neo4j Community Edition and modules licensed under AGPLv3 with the Commons Clause in this repository, and other closed source components not present in this repository.

I actually don't see them claiming their enterprise edition was ever open source, they also have an open source community edition licensed under GPL V3.

This is their License file:

https://github.com/neo4j/neo4j/blob/3.4.13/enterprise/com/LI...

You can see the: "Commons Clause" License Condition at the end of it.

Also, the history of the project, their enterprise edition started as AGPL, and later versions they added the Commons Clause over it, and finally now they've just gone closed source, probably to avoid all these legal woes.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• gpl-history

  2 15 2.5 HTML

You need a bit more than checksums for this. If anything the FSF published many different versions of the "official" GPL2 texts and this would defeat checksums. See https://github.com/pombredanne/gpl-history ... so in the general cases hashing a text does not work consistently and safely.

Suggest a related project