search

opentrace-community / opentrace-android

OpenTrace Android app. Reference implementation of the BlueTrace protocol.
https://bluetrace.io
GNU General Public License v3.0
577 stars 225 forks source link

Possible GPLv3 license violation by COVIDSafe App? #40

Open konomikitten opened 4 years ago

konomikitten commented 4 years ago

The Australian Government has released the source code for their COVIDSafe app which looks based around OpenTrace's source code, but I can't find the GPLv3 license in their repository and their license seems to violate clauses in the GPL? Can anyone with more knowledge comment on this? The COVIDSafe repositories can be found here.

mcccol commented 4 years ago

I noticed this too. ISTR that you're not allowed to add restrictions on use of derivative works (like the language regarding how it's to be used in the purported license.)

Some dodges I'm expecting: 1. sovereign license (no, doesn't apply to software, 2. Singapore (being the putative copyright owner) granted them a different license (maybe, but did the version Oz used contain anything contributed by someone under GPL3?)

konomikitten commented 4 years ago
  1. Singapore (being the putative copyright owner) granted them a different license

Some other people I talked to expect it to be this, but I'll leave this issue open until someone can say for sure?

mcccol commented 4 years ago

Well in that case it can be clean-roomed. Someone reads the .gov.au code, specs it for someone else who hasn't, who then rewrites it.

sjlongland commented 4 years ago

I've asked this of the ABC… it is possible the Australian Government has sought legal permission from the copyright holder(s) of OpenTrace to license COVIDSafe under a different license.

The question is, did they, and was that permission granted? If no, then I'd think that it's the GPLv3 that stands, not their license. diff-ing the two code branches, the changes look very superficial to me: some parts ripped out, but many of the core functions look the same.