From time to time, I come across a website that is clearly selling my MIT-licensed, FOSS project verbatim to unsuspecting buyers under an alternative name. Of course, they do not acknowledge the fact that the entire codebase and support is available for free. They may or may not include a copy of my license "in all copies or substantial portions of the Software" - how would I know unless I coughed up the money to their paywall?

To me this seems to be crossing the line - using a product that I and my team worked very hard on to essentially rip people off. Practically and legally, how can I prevent this?

To make it clear, I'm not trying to prevent:

  • General commercial use of our project. I don't mind, and in fact the software is designed, for someone to quickly build web applications for their businesses and organizations.
  • Usage in SaaS products (in this case they would be selling the service, not the software itself).
  • I don't even necessarily mind if someone adds substantial features, and then sells those features bundled with my product - so long as it is advertised that way. I want sellers to make it clear to buyers that their product is "Based on the free, open-source _____ project", and that you are paying for certain premium features (ideally, these would be listed explicitly).

The idea is that a seller would have to give full disclosure so that buyers would know which features of the software they are actually paying for, versus what they can already get for free.

Is there a license that addresses this? Or, is there any precedent that the MIT license already covers this scenario?

It's worth pointing out that this project isn't a library, which would be used as a component in a larger application. It is a fully-functioning, standalone application.

  • 3
    I've got to say, I'm a little bit disappointed with the answers posted below. They either 1) Barely touch upon the real issue at hand - someone's not following a license!, or 2) Suggest something that is nearly completely inaccessible and practical. There's definitely a legal answer here, which I will try and get to, but I've got exams coming up tomorrow, so I might be a day or two. One last thing: even if you did change your license, it likely won't change much - if they're not respecting the terms of your current license, they won't likely respect the terms of any future license.
    – Zizouz212
    Commented Jul 27, 2016 at 4:00
  • 3
    @Zizouz212 I am not convinced these people are not following a license (see my answer). They may be schmucks, but I am not sure they are infringing schmucks.
    – abligh
    Commented Jul 27, 2016 at 11:07
  • 3
    Unless you can confirm that the license is actually being violated, there's not really any grounds for complaint. If you're not sure, is there a demo or a refund option? Commented Jul 27, 2016 at 11:34
  • 6
    Do you include Apple in this notion of shady company selling MIT-licensed software to unsuspecting buyers under an alternative name?
    – pipe
    Commented Jul 27, 2016 at 13:29
  • 1
    @pipe: media1.giphy.com/media/9ftLoOjZMF8Bi/200_s.gif
    – alexw
    Commented Jul 27, 2016 at 16:37

6 Answers 6


Let's examine the MIT licence:

Copyright (c) [year] [copyright holders]

Standard copyright string

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

In essence the recipient can do nearly anything with the Software, provided that:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

The above copyright notice (the "Copyright (c)" line) and the remainder of this notice is included "in all copies or substantial portions of the Software." - see below.


A standard disclaimer of liability

Now, what does that condition ('The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.') mean? It means simply what it says, that the copyright notice and the licence texts needs to be included (somehow) in all copies of the Software or substantial portions of the Software. If someone therefore produces a derivative work, they need to include this text. That's what it says, no more and no less. Unlike the GPL which specifies how the text has to be included, this merely says that it needs to be included. There is no word like "prominently" describing how it has to be included. A common route is simply a text file somewhere within a binary tar-ball.

Why does the MIT licence not specify a greater degree of prominence? Apart from the fact MIT presumably felt they did not need or want that, two reasons:

  1. This would restrict what the recipient can do. An early predecessor of the GPL says the message should be displayed "on start up of the program". How would that work in a SaaS environment for instance? If a program is composed of (inter alia) 100 MIT licensed modules, would you want 100 licenses displayed?

  2. The purpose is (I believe) in the main to provably assert copyright (so the recipient cannot claim they did not know code was not in the public domain) and ensure the disclaimer of liability was effective (which it might not be were it omitted).

To your questions:

Is there a license that addresses this?

You haven't explained what 'this' is. Is the issue that you aren't getting credit, or that people are selling the software and making money in a 'shady' way?

If the issue is that you aren't getting credit, there are licenses (e.g. the GPL) which require more prominent attribution. However, even these may not be sufficient for you. For instance, it's quite possible to distribute products containing GPL software and not make this particularly prominent. Consider how many appliance routers etc. contain Linux. Sure, the good guys will (somewhere) mention the GPL licence, perhaps in page 98 of their click-through licence, and offer the source, but there's nothing to make them give credit.

And there is nothing to prevent people selling GPL licensed software either. Look at (e.g.) RHEL.

It's thus not evident what precisely you want to do. Perhaps you want to permit only non-commercial use of your software without some pre-arranged prominent attribution (I'm taking it that's the 'shady' you are referring to). That's fine, but that's not an open source licence (or at least not an OSI compliant licence). See for instance the answers to this question, particularly the bit mentioning that the Open Source Initiative says:

Can Open Source software be used for commercial purposes?

Absolutely. All Open Source software can be used for commercial purpose; the Open Source Definition guarantees this. You can even sell Open Source software.

Also, the fact your current software is released under the MIT licence means that they can always use that version of the software under the MIT licence. This doesn't give them the right to future versions (derived works) under that licence though.

Or, is there any precedent that the MIT license already covers this scenario?

The MIT licence permits the behaviour you complain of, providing they include the licence text including the copyright string somewhere. They only have to include it in copies of the software, and have every right to put it behind their 'paywall', whether you like it or not.

  • 1
    I like the first half of your answer. However, I think you can remove the second half. My question specifically states that I do want to permit commercial use.
    – alexw
    Commented Jul 27, 2016 at 16:35
  • 1
    @alexw I've adjusted the second part to address (I hope) more the 'shady' bit.
    – abligh
    Commented Jul 27, 2016 at 18:43

Changing the license at this point can't help you, they already got their copy under the original license. But, if it really is the MIT license, it has a clause in it about attribution. So, if they really aren't meeting that clause you may have a case to sue them for any and all moneys they've collected. But, to do that you will need a lawyer, which is also what you need to find out what you can actually do. Needless to say I am not a lawyer, and this is not legal advice.


Looks like you need a little copyleft.

The GNU Lesser General Public License seems perfect for you. A relevant clause:

You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following:

a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License.

If you want a license that's a little more permissive and less complex, then I would recommend the Mozilla Public License version 2.0 (FAQ). Two relevant clauses:

3.1 Distribution of Source Code Form

... You must inform recipients that the Source Code Form of the Covered Software is governed by the terms of this License, and how they can obtain a copy of this License. ...

3.2 Distribution of Executable Form

If You distribute Covered Software in Executable Form then:

a. such Covered Software must also be made available in Source Code Form, as described in Section 3.1, and You must inform recipients of the Executable Form how they can obtain a copy of such Source Code Form by reasonable means in a timely manner...

Unlike the LGPL, the MPL does not require that non-standard features of the library be documented exactly, only that the MPL parts of the combined work be named and made available as source, so it's not ideal. It draws a lesser boundary for the code its copyleft claims than the LGPL (the source code file), but does so very clearly and strongly.

The Artistic License 2.0 may be another option, in turn more permissive and less complicated than the MPL. Of particular interest is Section 4:

You may Distribute your Modified Version as Source...provided that you clearly document how it differs from the Standard Version, including, but not limited to, documenting any non-standard features, executables, or modules...

Section 8 seems perfect for your situation:

You are permitted to link Modified and Standard Versions...and Distribute the result without restriction, provided the result does not expose a direct interface to the Package.

You stated that people are bundling your library "verbatim", and section 4 will ensure they give you proper credit if they add features to your library and distribute the result (since that is a direct interface), but if they're incorporating it into web applications then they won't be required to publish the source to those.

Lastly, if you don't want to resort to copyleft at all you could use the infamous original BSD license, which includes this clause:

All advertising materials mentioning features or use of this software must display the following acknowledgement: This product includes software developed by the University of California, Berkeley and its contributors.

Of course you would replace the University of California name with your own. However, this is not recommended, and I advise you against it as well. It will make your program GPL-incompatible and causes practical problems.

No matter what you choose, you should be aware that FLOSS licenses cannot be revoked, so you may still see people packaging older versions of your software after you relicense.

  • 6
    I'm not sure why you think this is a suitable answer to this question. Changing the license won't stop people from infringing a license, especially when they are already infringing the current license. (cc @alexw )
    – Zizouz212
    Commented Jul 27, 2016 at 4:20
  • @Zizouz212 The question was tagged "license-recommendations", so I recommended some licenses according to the OP's specifications.
    – EMBLEM
    Commented Jul 27, 2016 at 4:24
  • Comments have been moved to chat; please do not continue the discussion here. Before posting a comment below this one, please review the purposes of comments. Comments that do not request clarification or suggest improvements usually belong as an answer, on Open Source Meta, or in Open Source Chat. Comments continuing discussion may be removed.
    – MadHatter
    Commented May 15 at 5:05

You seem to need to know three things:

  1. Whether the MIT license was meant to be used the way those people did. I think they did nothing wrong (since you say there is a chance they did include the MIT license in portions of the software. Facts needed though) because the short form of the MIT license is:

Massachusetts Institute of Technology license (MIT): You are allowed to use, modify and distribute copies of the software as long as you allow the same rights to the person to whom you distribute the software

  1. Whether there is any other license you could've used for "The idea is that a seller would have to give full disclosure so that buyers would know which features of the software they are actually paying for, versus what they can already get for free.":
    Well, the MIT license already covers that. There's also the LGPL, BSD, Apache license and Mozilla Public License that do what you want.

More to browse here: http://nrecursions.blogspot.in/2014/05/a-simplified-reference-to-various.html

3. What to do if there are violations of the license.
Who can help?
You can contact the:
- Open Invention Network
- Software Freedom Law Center
- GPL violation foundation (might not apply to your case, but they might provide some pointers)
- Software Freedom Conservancy

The "Who can help" link will take you to links for all the bulletted points.

  • 1
    +1 for the "Who can help" link. That's what I couldn't find and had to cover with the acronyms (properly expanded by Zizouz212) at the end of my answer. Now I have that link.
    – MAP
    Commented Jul 28, 2016 at 3:49

In the four years since this question was asked, the Commons Clause has appeared. While it's not free of controversy (e.g. is it open source? Is it enforceable?), I think this is exactly what the asker was looking for. In short, you can append this to your favorite open source license and it will, in theory, prevent the resale of your software without "substantial" modification.

From commonsclause.com:

The Commons Clause was intended, in practice, to have virtually no effect other than force a negotiation with those who take predatory commercial advantage of open source development.

  • There's no controversy. It's not open source. Commented May 16 at 20:09

First, you would have to verify that they are indeed violating the license agreement. I have no idea what your license agreement says and only a general idea what these other parties are doing.

But what can you do about it? I can only think of two possible things:

  1. Sue them. In that case you'd have to be prepared to prove in court that they violated the license agreement. That may or may not be easy to do, depending on circumstances. But then you or the university or somebody is going to have to pay lawyers to prosecute the suit, which can be expensive. And if you were giving the software away for free, there are no actual damages. A court may award punitive damages.

  2. Plant bombs in the code. Put something in there that lets you disable the code remotely. Like, I once had a contract with a client who kept demanding update to the software I wrote for him and didn't pay me. So finally with one update I put in code to access the Internet, connect to my server, look for a certain file, and if it couldn't find it, the software wouldn't run. I figured then if he continued to refuse to pay me I could just delete the file. He could theoretically find the relevant code and delete it, but if he knew how to do that he wouldn't have contracted me to write the code to begin with. As it was he eventually paid so I never had to test the legalities of what I did.

But if they've already downloaded the code, it's too late for anything like that anyway.

So the real answer is, "sue them". But that's time consuming and expensive.

If you were looking for some magical solution, just say "license infringement" three times in front of a mirror and they'll go away, sorry.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.