11
头图
Recently, we have noticed that Apache SkyWalking, a well-known open source project, published an article official blog subsidiary Volcano Engine changed all package names during the use of Apache SkyWalking to build its commercial products and deleted the Apache Software Fund headers, and without retaining the Apache Software Foundation and Apache SkyWalking LICENSE and NOTICE files in their redistributions, Volcano Engine illegally redistributed Apache SkyWalking without complying with the Apache 2.0 license.

following is the original translation of the Apache SkyWalking blog:

Apache SkyWalking is an open source APM for distributed systems and is a top-level project of the Apache Software Foundation.

On January 28, we received a license violation report from one submitter (anonymous). They have a cloud service called Application Performance Monitoring Full Link (Application Performance Monitoring - Distributed Tracing). In the Java Service Monitoring section , the anonymous committer provided this proxy download link:

https://datarangers.com.cn/apminsight/repo/v2/download/java-agent/apminsight-java-agent_latest.tar.gz

We downloaded it on January 28th at 23:15 UTC+8 and it here .

We have confirmed that this is a secondary distribution of the SkyWalking Java agent.

We list several proofs of this here, which every reader can compare with SkyWalking's official source code .

1, first and simplest one is the agent.config file, which uses the same configuration keys and the same configuration format.
This is the Volcengine version, you can also check SkyWalking agent.config .

火山引擎没有遵守 Apache 2.0 许可证的情况下非法地重新发布了Apache SkyWalking截图证据

2, In apmplus-agent.jar , Volcengine's proxy core jar, you can easily find several core classes that are identical to SkyWalking. ComponentsDefine class has not changed, not even the component ID and name. This is the version Volcengine to see SkyWalking version.

火山引擎没有遵守 Apache 2.0 许可证的情况下非法地重新发布了Apache SkyWalking截图存档证据

3. The entire code name, package name and hierarchy are the same as the SkyWalking 6.x version. Here's the Volcengine package hierarchy, and also check out the SkyWalking version.

火山引擎没有遵守 Apache 2.0 许可证的情况下非法地重新发布了Apache SkyWalking截图存档证据

The Volcengine team changed all package names, removed the Apache Software Foundation header, and did not keep the Apache Software Foundation and Apache SkyWalking LICENSE and NOTICE files in their redistributions.

Also, we couldn't find anything on their website to state that they are distributing SkyWalking.

All of these prove that they violate the Apache 2.0 license and disrespect the intellectual property and brand of the Apache Software Foundation and Apache SkyWalking.

We have reached out to their legal team and are awaiting an official response from them.

above is the original translation of the Apache SkyWalking blog.


After this article was published, at 11:00 noon on January 29, our editors of received feedback from ByteDance PR students. We will update the original feedback here: 161f4b9773649f The relevant person in charge of the volcano engine said that the volcano engine is connected to After receiving feedback from the community, we will investigate and deal with the matter as soon as possible, add SkyWalking's copyright statement to the relevant product documentation and distribution SDK, and contact the developer to communicate and apologize. Volcano Engine will strictly follow the open source community norms and conduct a comprehensive self-examination to avoid such problems from happening again.


Related reading " TikTok Accused of "Breaching" OBS-Related GPL Agreement? Or get caught up in controversy over the new Live Studio streaming app

image.png


鸣飞
1.7k 声望41 粉丝

SF 思否社区编辑一枚,关注人工智能、云计算、开源和行业的技术动态,欢迎投喂优质资讯!