Package: geoipupdate
Severity: serious
Hello maintainer,
Unfortunately, it seems that MaxMind have changed their policies on GeoLite2
databases such that they now require a license key. In addition (and more
critically), they are no longer licensed under a Creative Commons BY-SA
license, and now are under a custom EULA.
I reviewed the EULA (https://www.maxmind.com/en/geolite2/eula) and, while I am
neither an attorney nor a debian-legal faux-counsel, the agreement seems to
violate the DFSG in several regards.
First, it places restrictions on fields of endeavor -- specifically, that you
may not use the data for Fair Credit Reporting Act purposes, including
determining whether a person may be granted credit, eligible for insurance, for
employment purposes, or any other purpose governed by the FCRA.
Second, you are no longer permitted to redistribute the data except by binding
them to the EULA.
Third, you are required to check in with MaxMind regularly and destroy old
versions of the dataset within 30 days. This seems to violate several
long-standing interpretations of the DFSG including the desert island test and
the tentacles of evil test.
Based on this license change, it seems to me that geoipupdate can no longer be
in main. Contrib may be a suitable home, however?
Sincerely,
--
Harlan Lieberman-Berg
~hlieberman
