This is my first post so I apologize in advanced if this question has been asked/answered before.

I have a question regarding the usage of open source libraries. We own several apps that are not open source, but use open source libraries that doesn't require our source code to be open sourced like LGPL, MIT, Apache, etc.

We've been through a long process of sanitizing our apps and remove libraries that require our code to be open sourced. Sadly, we can't go open source at the moment, but we are sure that the libraries that we use does not make as in infringement with any license, What we don't know is if we have to specify for each of the open source libraries that we use what license they have.

Do we have to include in our apps a screen that lists all the open source libraries that we use?. Do we have to include a file with this information?. Do we have to do anything at all?.

  • What you must include for any given library is a function of the licence on that library. You should start by reading Does a program need to show the open source license (Apache 2.0) of its components, and if that doesn't answer your question, modify your question to clarify what you're still unsure of. – MadHatter Jun 9 '20 at 5:10
  • 3
  • Thanks for the response!. @MadHatter I don't think i understood correctly what you mean by "function of the license on that library". Do I have to specify what I do with a library with a specific license?. – pmgallo Jun 10 '20 at 18:24
  • By reading the linked post if I understood correctly I should include in an about page or similar all the libraries licensed with apache 2.0 lic. Our apps are not open source, and use libraries with other licenses. Some of them specify clearly that some attribution should be included, others don't. The general advice is that you should do it with all of them but is a little impractical. What is your opinion?. Thanks again! – pmgallo Jun 10 '20 at 18:31
  • By "What you must include for any given library is a function of the licence on that library" I meant that your obligations in respect of any given library depend on its licence. If libfoo is under 3BSD, you have certain obligations; if Apache2, slightly more; if GPLv3, considerably more, and so on: but in all cases the licence will tell you what your obligations are. Then you need to look at the licence on libbar, and see what those obligations are. Then the licence on libbaz, and so on. – MadHatter Jun 10 '20 at 19:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.