BambuStudio has been violating PrusaSlicer AGPL license since their fork

BambuStudio has been accused of violating the AGPL license of PrusaSlicer by incorporating a closed-source networking plugin, which is integral to its operation. This breach has been publicly highlighted by open-source advocates and raises legal and ethical questions about licensing compliance in the 3D printing community.

The core issue centers on BambuStudio, a fork of PrusaSlicer, which uses a binary-only plugin to connect to its cloud services. According to open-source license experts, this plugin cannot be separated from the main software without violating the AGPL-3.0 license that governs PrusaSlicer. The plugin is not bundled with the software but is downloaded at runtime from external servers, complicating efforts to audit or verify its compliance. The architecture means that BambuStudio effectively operates as a single product with a closed component, which is incompatible with the copyleft requirements of the AGPL license. The violation was first publicly flagged in March 2023, with ongoing concerns about whether BambuLab, the company behind BambuStudio, has taken steps to rectify the issue.

Why It Matters

This matter is significant because it challenges the legal and ethical standards of open-source licensing within the rapidly growing 3D printing industry. Violating the AGPL license undermines the open-source community’s principles of transparency and shared development. Additionally, it raises broader concerns about Chinese manufacturers’ compliance with international software licenses and the potential implications for industrial data security, especially given China’s strategic interests in 3D printing technology and recent legal frameworks that influence data and software control.

Background

PrusaSlicer, an open-source slicing software, is licensed under the AGPL-3.0, a strict copyleft license requiring derivative works to remain open source. BambuLab, a Chinese company, forked PrusaSlicer to develop BambuStudio, which includes proprietary components, notably a networking plugin. This plugin communicates with BambuLab’s cloud services and is distributed as a binary that downloads at runtime. Critics argue this architecture violates the license because the plugin is integral to the software’s primary functions and cannot be audited or verified for compliance. The controversy echoes ongoing debates about open-source licensing enforcement and Chinese tech companies’ adherence to international legal standards, especially amid China’s increasing strategic focus on 3D printing and industrial data security.

“Using a closed-source plugin that communicates with cloud services in a product based on AGPL-licensed code is a clear violation of the license terms.”

— Open-source licensing expert

“The integrity of the open-source license is vital to our community, and any violation undermines trust and collaboration.”

— PrusaSlicer developer

What Remains Unclear

It is not yet confirmed whether BambuLab intends to address the license violation or if legal action will follow. The internal decision-making process at BambuLab remains unclear, and there is ongoing debate about the technical extent of the violation and possible remedies.

What’s Next

Legal and community pressure may prompt BambuLab to modify its architecture to comply with the AGPL license, possibly by open-sourcing the networking plugin or removing it. Further technical audits and legal analyses are expected to clarify the scope of the violation and potential enforcement actions. The open-source community continues to monitor developments for signs of compliance or escalation.

Key Questions

What is the AGPL license, and why does it matter here?

The AGPL-3.0 is a strong copyleft license requiring that any derivative work, including networked components, remains open source. It matters here because BambuStudio’s closed-source networking plugin, integral to the software, appears to violate this requirement.

How does BambuStudio’s architecture violate the license?

The plugin is not bundled but downloaded at runtime, and it is essential for the software’s primary functions. This setup effectively makes the entire product a derivative of the original open-source code, which the license prohibits from being closed-source.

What are the potential consequences for BambuLab?

If the violation is confirmed and not remedied, legal action could be pursued by the open-source community or license holders, potentially leading to injunctions, fines, or mandates to open-source the proprietary components.

Why is this issue relevant to the broader 3D printing industry?

Many companies rely on open-source software frameworks, and license violations threaten the legal foundation of open-source collaboration. It also raises concerns about data security and compliance, especially given China’s strategic emphasis on industrial data control.

Source: Hacker News