惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

K
Kaspersky official blog
Engineering at Meta
Engineering at Meta
D
DataBreaches.Net
Stack Overflow Blog
Stack Overflow Blog
Microsoft Security Blog
Microsoft Security Blog
Y
Y Combinator Blog
B
Blog RSS Feed
GbyAI
GbyAI
P
Proofpoint News Feed
aimingoo的专栏
aimingoo的专栏
MyScale Blog
MyScale Blog
D
Docker
阮一峰的网络日志
阮一峰的网络日志
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Recorded Future
Recorded Future
美团技术团队
The Register - Security
The Register - Security
V
Visual Studio Blog
H
Hackread – Cybersecurity News, Data Breaches, AI and More
T
Tailwind CSS Blog
爱范儿
爱范儿
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
T
The Blog of Author Tim Ferriss
博客园 - 司徒正美
量子位
B
Blog
F
Fortinet All Blogs
Martin Fowler
Martin Fowler
博客园 - 【当耐特】
MongoDB | Blog
MongoDB | Blog
A
About on SuperTechFans
I
InfoQ
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
有赞技术团队
有赞技术团队
雷峰网
雷峰网
大猫的无限游戏
大猫的无限游戏
J
Java Code Geeks
L
LangChain Blog
Latest news
Latest news
S
SegmentFault 最新的问题
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
Blog — PlanetScale
Blog — PlanetScale
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Cisco Talos Blog
Cisco Talos Blog
F
Full Disclosure
C
Cisco Blogs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
W
WeLiveSecurity
T
Tenable Blog
T
Tor Project blog

Danb Blog

Cheaper Sodastream Gas with a Big Tank June 2026: What I've Been Working On · Danb Blog Running Snyk On Forgejo/Codeberg Actions · Danb Blog Tuta & Proton: An Open Source Client Does Not Result in an Open Source Service · Danb Blog May 2026: What I've Been Working On · Danb Blog 3D Printing Parts for my Greenhouse, Round 2 · Danb Blog Great Devices: Nexus 7 2013 · Danb Blog R36S Console RetroArch Stuck Menu Issue · Danb Blog April 2026: What I've Been Working On · Danb Blog Basic OpenCode Sandboxing with Docker · Danb Blog Games Played in 2025 · Danb Blog March 2026: What I've Been Working On · Danb Blog Shivam Mathur's "node-docker" Images are Awesome for PHP CI · Danb Blog February 2026: What I've Been Working On · Danb Blog Your BookStackApp project was assigned as a project for my Software Architecture course · Danb Blog My Sovol SV08 3D Printer Setup in 2026 · Danb Blog January 2026: What I've Been Working On · Danb Blog Epson Printer: The administrator password you entered was not recognized · Danb Blog Pressure to Follow Process · Danb Blog Online Shopping Email Notifications · Danb Blog My HomeLab Setup in 2026 · Danb Blog Linux Label Printing with the Phomemo D30 · Danb Blog Reporting to the CMA: Google Android Developer Verification · Danb Blog OPNsense & Dnsmasq: Responding with specific DNS servers · Danb Blog An Impromptu Introduction to ZFS Drive Replacement at 1am · Danb Blog Experience with UK Medical Cannabis for Ankylosing Spondylitis · Danb Blog Copyright Takedown for Linking to the "State of Open Source" Report · Danb Blog Scripting Monitors (KDE on Fedora) · Danb Blog Amber flags in Open Source & Self-Hosted Projects · Danb Blog LLMs are Directing Open Source Licensing · Danb Blog Games Played in 2024 · Danb Blog Beware of Poison in the Source · Danb Blog Common Misconceptions of the AGPL · Danb Blog Adapting GitHub action PHPUnit tests for Codeberg/Forgejo · Danb Blog Lessons from the Allotment · Danb Blog Futo, Please don't attempt to create your own Open Source Definition · Danb Blog Material You (Dynamic/Adaptive) Colors in Legacy Android Apps · Danb Blog Scripting Monitors (Gnome & Wayland on Fedora) · Danb Blog Retaining a Greenhouse Roof with 3d Printing · Danb Blog Games Played in 2023 · Danb Blog Lessons From Growing Food Indoors · Danb Blog Why the Distinction Between "Open Source" and "Source Available" is Important · Danb Blog Raspberry Pi Camera Module 3 Timelapse · Danb Blog Removing the Rear Seats on a Volvo C30 · Danb Blog Reporting Google's WEI to the CMA · Danb Blog Controlling Default GRUB Boot Option via USB · Danb Blog Creating a Video Home for FOSS Projects · Danb Blog Paying for Search · Danb Blog My Favourite Static Site Deploy Method · Danb Blog PhpStorm (JetBrains IDE) 2023 Linux Scaling · Danb Blog Synology Hibernation with Active Backup for Business and Tailscale · Danb Blog My 2023 HomeLab Setup · Danb Blog Redefining Open Source via "Commercial Open Source" · Danb Blog Moving to Mastodon · Danb Blog Gaining Sponsors · Danb Blog "This is a Low Maintenance Project" · Danb Blog Upgrading my CPU, Ryzen 2600 to 5800x · Danb Blog Migrating Google Photos to my Personal NAS · Danb Blog Scheduling Proxmox Storage to Reduce Disk Activity · Danb Blog Why the Term "Open Source" is Important · Danb Blog Lessons From Working for Myself (9 Months In) · Danb Blog Misrepresenting Open Source for Business Benefit · Danb Blog Cat Images in WebP · Danb Blog My 2022 Workstation Setup · Danb Blog Leaving my Job to Focus on Open Source (For a bit) · Danb Blog Quickly Getting Placeholder Images With Unsplash Source · Danb Blog A Thanks to Laravel for the LTS Releases · Danb Blog A Quick Overview of Unix-Style Permissions · Danb Blog The Power of currentColor · Danb Blog Dealing With Ankylosing Spondylitis Flareups · Danb Blog Hugo Verbose Dates With Suffixes · Danb Blog
No, Gumroad Did Not Become Open Source Today · Danb Blog
2025-04-05 · via Danb Blog

Advisory: I am not a legal expert and there could likely be inaccuracies in this post.

Today Gumroad announced that they’ve become open source, with this being echoed by the founder and on social sites like Hacker News:

Gumroad X account post announcing 'Gumroad is officially open source!' Gumroad founder X post with text 'Today, Gumroad goes open source' Gumroad hacker news post titled 'Gumroad is now open source'

Unfortunately though, this uses a custom license which wouldn’t meet the widely regarded definition of open source, and therefore wouldn’t be widely regarded as open source so calling this open source could be misleading to many.

Why is it not open source?

The license sets limits upon open rights:

Small Business and Exempt Organizations
You may use the software under this license only if (1) your company has less than 1 million USD (2024) total revenue in the prior tax year, and less than 10 million USD (2024) GMV (Gross Merchandise Value), or (2) you are a non-profit organization or government entity. Adjust the revenue threshold for inflation according to the United States Bureau of Labor Statistics’ consumer price index for all urban consumers, U.S. city average, for all items, not seasonally adjusted, 1982–1984=100 reference base. If you are a company and exceed either of the limits in (1), your license ends. You may contact the licensor to discuss an alternative license.

Redistribution is also questionable from my non-legal-expert understanding since the license explicitly allows distribution while also not allowing sublicensing or license transfer:

These terms do not allow you to sublicense or transfer any of your licenses to anyone else, or prevent the licensor from granting licenses to anyone else.

These parts of the license go against the following requirements of the open source definition:

  • 1. Free distribution
    • Ignoring the questionable redistribution part of the license, it still limits distribution rights to only those meeting the “Small Business and Exempt Organizations”.
  • 3. Derived Works
    • Again, these are only allowed by those meeting the “Small Business and Exempt Organizations”.
  • 5. No Discrimination Against Persons or Groups
    • License specifically limits rights provided to those that meet their criteria.
  • 7. Distribution of License
    • This part is questionable as per my quoted line above

Isn’t this fair though, what’s wrong?

Sure! I personally believe that it’s fair for folks to license their own efforts however they wish. The issue isn’t that the license exists, it’s that it’s misrepresented as open source.

This appears to be another example of a business wanting to use “open source” for its marketing & reputation potential, while not wanting to give away the rights usually afforded in open source to limit risk. But it’s the risk taken and rights given by other developers & projects which has given open source that reputation and marketing power.

Not to say that it’s the intention to mislead or be malicious though, this can easily be done by not understanding, or not considering, the commonly regarded open source definition.

To users, what’s the actual difference compared to being open source?

All of the rights provided to users depend on being within the “Small Business and Exempt Organizations” conditions quoted above. With open source, rights are provided evenly, without specific targeting of software users.

While you may think that the requirements won’t impact normal users, their wider effects can do so. For example, this could limit possibilities of service providers providing the software as a service, meaning less hosting options for users. It also can impact forking, a crucial part of open source which allows software to thrive and survive beyond it’s original author, especially on a larger project like this since development & maintenance efforts would be limited to those that fit their conditions.

With the specific wording used here, these conditions may have wider impact than you expect. Looking at their definitions:

Your company is any legal entity, sole proprietorship, or other kind of organization that you work for, plus all organizations that have control over, are under the control of, or are under common control with that organization.

This is quite broad. For example, if you just worked for a $1M revenue company, you wouldn’t have rights to use/modify/redistribute the software as a side project, for self-hosting, or for other uses like a community-project/charity etc… $1M revenue isn’t a lot when it comes to business, and I think there’s a considerable overlap in admins & developers able to work with the code-base, and those working for $1M+ revenue business.

So what’s the solution?

Just don’t call it open source. “Source Available” is a common term for the wider scope of software which has been made available to viewing. There are some more focused movements like Fair-code, fair source, and source first but I’m not sure it fits into any of those. The commons clause is kind of similar without a threshold.

Alternatively, a license meeting the OSD could be used instead.


Aside: Problematic License Wording

Upon the mentioned questionable distribution rights of the license, there are other things in this custom license which just appear quite strange.

Firstly, the USD specific condition is just odd. I can’t see any mention of equivalent or other currency. Going by the text, it seems like you might not be subject to some of the conditions if you don’t deal with USD. This requirement is also a bit complex, having to adjust it for inflation following the “United States Bureau of Labor Statistics’ consumer price index”. What if the Bureau of Labor Statistics is dismantled? Wouldn’t say that’s out of the question at the current state of things.

Secondly, the way rights are afforded are a little strange:

The licensor grants you a copyright license for the software to do everything you might do with the software that would otherwise infringe the licensor’s copyright, but only as long as you meet all the conditions below.

Normally licenses provide specific rights, but this allows “everything you might do with the software that would otherwise infringe the licensor’s copyright”. The “licensor” is specifically defined as “Gumroad, Inc.” but this otherwise seems very broadly scoped. Thinking out a scenario, I could modify the software to consume other content & repos from “Gumroad, Inc.”, then republish that as my own? Usually that’s be infringing on their copyright but here I’ve been provided permissions to infringe their copyright in “everything you might do with the software”. Not sure it’d hold up in court, but seems like a questionable approach to provide rights in a license.