Last week, a guy copied my source code from Github, even the comments I have written in my source code. Since it wasn't much big of a project, It didn't bother me much (even though I put hours of work into it). In the future, if someone tries to copy my project, how should I proceed? Does having your code on Github mean anyone can copy the code without giving any credit to the owner? I also don't want my projects to be private. Just to clarify, I didn't use any license for my project
Sadeedpv🥇
Posted on • Updated on
Someone copied my code on Github and claimed it to be his own project.
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (39)
The answer to your question depends on the license that you applied to your work. Your post doesn't indicate, but since you have a relatively small number if GitHub repositories I took a look. Some of your repos have no license specified, some have the MIT license, and 1 the Apache license. Here's a bit of an answer for all 3 cases.
Case 1: no license specified.
Technically, if you have not specified a license, and have also not explicitly put the work into the public domain, then nobody but you can legally make a copy. Whether you have explicitly stated this anywhere or not, this case is essentially a copyright with all rights reserved. If this is your intention then it should probably be a private repository. People fork and clone public repos all the time including those without licenses stated. Many mistakenly think no license means public domain which it does not.
Case 2: MIT license.
This is an all-permissive license. It allows others to do almost anything with your code. They can copy it as is. They can use it in closed source commercial software. They can change it. They can give it away for free with or without changes. They can sell it with or without changes. And so on and so forth. The only requirement is that they keep the copyright notice and license notice in tact in any copies they distribute including in "substantial portions". However, they can redistribute it with or without changes under whatever license they want. The main purpose of requiring keeping the notice is so that others know how that portion was originally licensed. They can copy non-substantial portions without including your copyright notice and license notice.
With the MIT license, you should really also put your copyright and license notices at the top of each source file in a comment in addition to the license file in the repo. This way if someone uses one or more files but not entire repo, your copyright notice and license declaration stays with your code, unless they deliberately remove it. With only a license file you risk someone who only needs one of your source files separating those notices from your code accidentally with no ill-intention toward you or your work.
Case 3: Apache license.
One of your repos uses the Apache license. Like the MIT, this is all-permissive. There are a few differences but mostly allows others to use your code how they see fit. One of the differences is that the Apache requires that any changes to your code are identified so that others know that it was changed and how. The MIT doesn't require this although many do this anyway. You should read through it for other differences as well.
As with MIT, you should also put copyright notice at top of each source file, but not the full license (too long for that). Near bottom of Apache license there is an abridged notice that you should include in comment at top of each source file. The reason for including this in the source files is the same as before---to ensure that your copyright and license notices stay with your code if only part is reused.
An all-permissive license such as MIT or Apache is as close to putting something in public domain as it gets without actually doing so. In some countries, it is the closest you can get to putting something in public domain.
If you want to retain more rights to your work, then check out so-called copyleft licenses. The GPL 3.0 is the most common of these. With the GPL 3.0, those redistributing copies or derivative works must also license with GPL 3 in addition to keeping your notices. Essentially it keeps derivative works open source, whereas MIT and Apache do not.
I have made the repo private since yesterday, So I guess it shouldn't be a problem anymore. I appreciate that you took the time to look into the problem and thanks for your effort ❤️
You're welcome. Before I saw your reply I added a paragraph to end of my comment on GPL license which has a copyleft requirement. Not sure if that may be useful to you or not.
I don't have much idea about what copyleft concept is. Where can I read more on the topic?
The short explanation of "copyleft" licenses is that if you apply a "copyleft" license to your code, then anyone who creates a derivative work from your code must apply the same license to their code. This implies that any derivatives of the derivative, etc also will have the same license. In essence, it keeps your code and anything derived from it open source. Whereas with an all permissive license like MIT, there is no such obligation on those who create derivatives (e.g., MIT licensed code can be used by others, including derivatives, in closed source software). In both cases, you are still the copyright owner, but you license away more of your rights with MIT or Apache than you do with the GPL and other "copyleft" licenses.
Here's a link that explains in more detail: gnu.org/licenses/copyleft.en.html
Making the repo private doesn't solve the problem. He has already copied the code and I'm sure others have done the same, but you just saw that of his'. I think the solution is simply licensing. Thanks to Vincent A. Cicirello for clarifying all types of open source licences.
well not if he also posts it as he claims it be his.
Hello Vincent A. Cicirello and Sadeedpv,
First I want to thank you Sadeedpv for your article.
I realize it's more of a question than an article, but in my humble opinion you're raising a topic that feels underappreciated and underrepresented.
I would also like to thank you, A. Cicirello, for taking the time to share some clarificaton regarding licenses.
This is not quite right - the GitHub terms state that by publicly making your code available on the service anyone has the right to fork your code, but if it does not have a licence, they cannot do anything with the forked code and it must remain linked to the source repo
Thanks. I just edited my comment to remove the line about forking.
Incredibly good answer 😊💪
If the project has a license and copyright that requires attribution you can report him to his host. You can also comment or use the contact form to try to convey the problem.
Notice that some copying does fall under the fair use doctrine and is OK. I see my code and writing all over the web. Often misused by spammers. Unfortunately there's not much I can do about that.
You can make a copyright claim and send a takedown notice to github. I have done this on private work-related contracts when a contractor shared an otherwise private, copyrighted project. Complete instructions are here:
docs.github.com/en/site-policy/con...
Github will take it down, the person can appeal, and your takedown notice will become a matter of public record with identifying attributes removed. If you really care about this, and contacting them has had no effect, follow those instructions to resolution.
Thanks for the feedback ❤️
You have to search for open source licenses.
You can readmore here
Hey, which license would you recommend to prevent users from copying the projects and publishing them as their own?
It depends what your goal is - if you don't want anyone to see/use/edit your code at all, don't make it public and write your own closed source license.
If you just don't want people to claim your code as their own then a "copy-left" license is probably what you want. Jmaus post and link is probably the best - dev.to/jmau111/comment/2082h
I'm sorry to read that @sadeedpv
I'd use GPL 3. They need to refer tonand keep they project opensource. Otherwise private way it's.... =\
I did try to talk to him. But he seems to ignore my messages.
I really enjoyed Vincent's answer and learned from it.
But my perspective is that it's really not worth worrying about, unless you intend to make money from it, and are willing to litigate. If not, just take it in stride and forget about it. If anything, consider it a compliment.
I put all my open source code under the MIT license. Some of it is fairly significant and I've seen parts of it copied without respecting the license. But it doesn't really bother me honestly. If people are finding it useful and building things with it, I'm happy.
To present somebody else's work as your own is illegal. It doesn't matter which license you offer; it is illegal. This right is protected under the Universal Copyright Convention (UAC) and Bern Convention, both of which are internationally agreed treaties that most countries have adopted.
The right to call yourself author cannot be sold or given away because the author has written the work and nobody can change that. It is in the law of every country that has adopted one or both of these two conventions. Whatever the license you give, no one but the author is allowed to call him or herself the author.
So what if someone does copy your work and takes full credit? As you have experienced, licensing does not prevent people from stealing your work. I reckon you have felt the pain and frustration yourself. I know it too and you have my full sympathy. Rest assured that the law is on the side of the author, whatever the license may be.
The problem is of course that the person who wrongfully claims authorship does not abide by the law. Who is going to stop him? There are things you can do in the judicial world (like sueing), but also things you can do in the social world (like exposing this person or trying to discuss it), or do things in the technical world (like hiding or blocking your work) or you can even ignore it. Please consider your optioins carefully because each option comes with risks and downsides too.
If you have no license at all, MIT or Apache license, you can ask GH to change the repo/take it down, if the user claims they made the software even if they did not.
However, you should make reasonable effort to contact the person and ask them nicely to change their text.
Unpreventable if it is public, regardless of what license or implicit license you have. Whether they want to credit you is totally up to them. If I were you, I will learn to let go and continue to contribute to the community.
Github is slowly dying, many people are promoting to take his code out of Github.
If not Microsoft
CodePlexGitHub, where are people moving their projects to?You have other options like GitLab (Open-Source), Atlassian BitBucket or your own Git Host (there are several Open-Source softwares like Gitea, Gogs which helps you to setup your own Git Host, however, on a large scale, you can consider GitLab Self-Hosted Instance as it provides many features). Many people are now moving their projects to GitLab and some are moving to their own Git Host.
CVS is a great alternative.
What is the website for CVS?
Is it as fully functional as an open source project repository as GitHub? (Their web interface has to be better, because GitHub's UI leaves a lot to be desired.)
This is a scenario I've reported someone to the FBI. The codebase belonged to a university technically so it's probably easier. If they're American the FBI takes that shit seriously. If they're a foreign national; that can forfeit any opportunity they might have that leads them to the US.
Please clarify what is the license of your project, otherwise this post is meaningless...
It does not have a license
Ok, then nobody is allowed copy your work, because copyright (all rights reserved) is implicit if you don't specify a license. In any case it's always better to clarify that on public repositories.
you might want to read that
I would contact this person and give him a warning so that he know if he copies it next time without asking legal actions will take place
Every John Lennon have his own Mark David Chapman. Enjoy.