TrackMyIndoorWorkout / TrackMyIndoorWorkout

Indoor fitness machine (bike, treadmill, rower, kayak / canoe / swim ergometer, elliptical) companion app to record virtual workouts with synthetic GPS track of simply circling on a track shape route
https://TrackMyIndoorWorkout.github.io
Apache License 2.0
37 stars 9 forks source link

internet_connection_checker package mystery, glitch in the Matrix? #521

Closed MrCsabaToth closed 4 days ago

MrCsabaToth commented 1 week ago

I noticed this with the GitHub CI build test: suddenly it's failing and the internet_connection_checker v 2.0.0 disappeared. On https://pub.dev/packages/internet_connection_checker/versions/ the newest version definitely seems to be 1.0.0+1 so the CI error is correct: https://github.com/TrackMyIndoorWorkout/TrackMyIndoorWorkout/actions/runs/11046081347

Resolving dependencies... Because no versions of internet_connection_checker match 2.0.0 and no versions of internet_connection_checker match >2.0.0 <3.0.0, internet_connection_checker ^2.0.0 is forbidden. So, because track_my_indoor_exercise depends on internet_connection_checker ^2.0.0, version solving failed. You can try the following suggestion to make the pubspec resolve:

  • Consider downgrading your constraint on internet_connection_checker: flutter pub add internet_connection_checker:'^1.0.0+1' Error: Process completed with exit code 1.

Absolutely no idea where the v 2.0.0 went, is this a glitch in the Matrix because on my local machine that's what I have. The solution will be probably to upgrade to https://pub.dev/packages/internet_connection_checker_plus ?

One fear if the change will affect the internet connection checking customization capability (#206, #392)

MrCsabaToth commented 4 days ago

https://pub.dev/packages/internet_connection_checker_plus would be a feature loss, because it seems to support HTTP URLs. Currently we support generic TCP host+port.

MrCsabaToth commented 4 days ago

Oh, this is a DMCA takedown! https://github.com/github/dmca/blob/master/2024/09/2024-09-04-internet-connection-checker-plus.md

MrCsabaToth commented 4 days ago

Copy of the DMCA takedown submission:

Before disabling any content in relation to this takedown notice, GitHub

To learn about when and why GitHub may process some notices this way, please visit our README.


Are you the copyright holder or authorized to act on the copyright owner's behalf?

Yes, I am the copyright holder.

Are you submitting a revised DMCA notice after GitHub Trust & Safety requested you make changes to your original notice?

No

Does your claim involve content on GitHub or npm.js?

GitHub

Please describe the nature of your copyright ownership or authorization to act on the owner's behalf.

Please provide a detailed description of the original copyrighted work that has allegedly been infringed. If possible, include a URL to where it is posted online.

A Flutter/Dart package named "data_connection_checker" is hosted on pub.dev (https://pub.dev/packages/data_connection_checker). This package is no longer continued, as indicated by the author of another package, "internet_connection_checker" (https://pub.dev/packages/internet_connection_checker). To continue the functionality of the original package, the author of "internet_connection_checker" created a new package with the name "internet_connection_checker" and the same license as "data_connection_checker."

Noticing that "internet_connection_checker" did not support the web platform for Flutter apps, [private] cloned the package's contents under fair use, modified it to support the web platform, and published it on pub.dev under the name "internet_connection_checker_plus" (https://pub.dev/packages/internet_connection_checker_plus). [private] included the original license, credited the authors of both "data_connection_checker" and "internet_connection_checker," and, after making substantial changes, added my own license for my copyrighted work while retaining the original license.

Recently, the author of "internet_connection_checker" published a new version (v2.0.0) of their package on pub.dev. Upon investigation, I found that this version contains code strikingly similar to mine. This suspicion is supported by a GitHub commit that references the name of my package within their code (https://github.com/RounakTadvi/internet_connection_checker/blob/79a8ad9eee5de2ff3061c25537aaefb33d1ae01f/lib/internet_connection.dart#L19-L46), without giving me credit or including my license for the copyrighted work. I reached out to the author via email, requesting that they either credit me or take down the published package, but they haven't taken any action yet.

Relevant links for your reference:

GitHub Repositories:

Published Packages on pub.dev:

Commits Suspected of Infringement:

Files Mostly Copied:

The published package version that infringes my copyrighted work: https://pub.dev/packages/internet_connection_checker/versions/2.0.0

What files should be taken down? Please provide URLs for each file, or if the entire repository, the repository’s URL.

The files from the directory "lib" of repository https://github.com/RounakTadvi/internet_connection_checker should be taken down.

Do you claim to have any technological measures in place to control access to your copyrighted content? Please see our Complaints about Anti-Circumvention Technology if you are unsure.

No

Have you searched for any forks of the allegedly infringing files or repositories? Each fork is a distinct repository and must be identified separately if you believe it is infringing and wish to have it taken down.

No, I haven't searched any forks.

Is the work licensed under an open source license?

Yes

Which license?

BSD-3 Clause License

How do you believe the license is being violated?

The License states that "Redistributions of source code must retain the above copyright notice". i.e. My copyright License (BSD-3 Clause). But the published work contains another License (MIT) under the name of [private].

What changes can be made to bring the project into compliance with the license? For example, adding attribution, adding a license, making the repository private.

Adding my License and giving me credits

What would be the best solution for the alleged infringement?

Reported content must be removed

Do you have the alleged infringer’s contact information? If so, please provide it.

Name: [private]
Github: https://github.com/RounakTadvi
Email: [private]

I have a good faith belief that use of the copyrighted materials described above on the infringing web pages is not authorized by the copyright owner, or its agent, or the law.

I have taken fair use into consideration.

I swear, under penalty of perjury, that the information in this notification is accurate and that I am the copyright owner, or am authorized to act on behalf of the owner, of an exclusive right that is allegedly infringed.

I have read and understand GitHub's Guide to Submitting a DMCA Takedown Notice.

So that we can get back to you, please provide either your telephone number or physical address.

[private]

Please type your full legal name below to sign this request.

[private]

MrCsabaToth commented 4 days ago

I was thinking about making a copy of the internet_connection_checker v2.0.0, upon code inspection it seems that switching to internet_connection_checker_plus won't be a feature loss, because the former is already doing HTTP requests.