Package: geoipupdate Severity: serious Hello maintainer,
Unfortunately, it seems that MaxMind have changed their policies on GeoLite2 databases such that they now require a license key. In addition (and more critically), they are no longer licensed under a Creative Commons BY-SA license, and now are under a custom EULA. I reviewed the EULA (https://www.maxmind.com/en/geolite2/eula) and, while I am neither an attorney nor a debian-legal faux-counsel, the agreement seems to violate the DFSG in several regards. First, it places restrictions on fields of endeavor -- specifically, that you may not use the data for Fair Credit Reporting Act purposes, including determining whether a person may be granted credit, eligible for insurance, for employment purposes, or any other purpose governed by the FCRA. Second, you are no longer permitted to redistribute the data except by binding them to the EULA. Third, you are required to check in with MaxMind regularly and destroy old versions of the dataset within 30 days. This seems to violate several long-standing interpretations of the DFSG including the desert island test and the tentacles of evil test. Based on this license change, it seems to me that geoipupdate can no longer be in main. Contrib may be a suitable home, however? Sincerely, -- Harlan Lieberman-Berg ~hlieberman
