search

urbanadventurer / WhatWeb

Next generation web scanner
https://www.morningstarsecurity.com/research/whatweb
GNU General Public License v2.0
5.19k stars 885 forks source link

Unclear license of the plugins/IpToCountry.csv #366

Open xambroz opened 3 years ago

xambroz commented 3 years ago

Please what is the legal status of the plugins/IpToCountry.csv database? The whatweb project is released with the GPLv2+ license. But it contains plugins/IpToCountry.csv file which states it is "DONATIONWARE" = possibly limuting commercial use. Does whatweb has some formal exception to be able to share it with GPLv2+ license?

Upstream of this database seems to be inactive/gone. Wouldn't it make sense to switch to some database which would be free too use without additional conditions (such as maxminds lite ip2country database?) ? Thank you Michal Ambroz

oturpe commented 3 years ago

I would like to add that both README and the project homepage say the license is GPLv2. It would be good to add "or later" there, so it would be clear from the first reading that also GPLv3 is available.

urbanadventurer commented 3 years ago

Thanks for raising this issue.

Do you have any suggestions for an alternative GeoIP database? MaxMind GeoLite is free but isn't ideal because users would need to signup individually to obtain a license key.

xambroz commented 3 years ago

Hello Andrew, what about for example https://iptoasn.com/ ? They offer free tab separated IP to countrycode. Clear license, they claim to update the basic data hourly.

Or this one - https://github.com/geoacumen/geoacumen-country ... mmdb based on data from https://iptoasn.com/

I have found also some additional : http://www.ip2nation.com/ - "free" without any other restrictions, would probably be worth to ask author for more formal description how much free. https://db-ip.com/db/ - CC Attribution license https://ipinfodb.com/free-database - Attribution, not clear about redistribution.