The theme Triculin uses the Drupal.org Git Repo to illegally distribute a font known as "Myriad Apple" that is Copyright (c) 1992 Adobe Systems Incorporated. Myriad is a also trademark of Adobe Systems Incorporated.

Myriad is normally sold as a commercial font, bundled with a kit that costs US $916, according to https://www.fonts.com/font/adobe/myriad

In other words, by including this 3rd party font in the repo, the project's owner has put the Dupal Association at risk of having to pay restitution to Adobe for hosting this commercial font online.

To limit the liability of the Drupal Association, I strongly suggest that the repo is unpublished ASAP (or that it is rebased to remove all copyrighted materials).

A notice about this copyright violation is also posted in the project's own issue tracker (see child issue) and sent to nitish chopra (project owner) via the Drupal.org Contact form.

Comments

gisle created an issue. See original summary.

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented
Issue summary: View changes

Fixed typo in summary.

killes@www.drop.org’s picture

killes@www.drop.org commented

I unpublished the theme and mailed the author:

Hi there,

we have been made aware of a copyright violation in your theme
Triculin. I've unpublished it for the time being.

We may have to completely remove it from our servers.

Please respond at

https://www.drupal.org/node/2743925
gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

Thank you for your quick action.

The author only got approved for the permission to create full projects a few days ago (the PA review process isn't what it used to be).

He uses a bleeding edge HTML5-technique for embedding the stolen font in the theme. I believe this technique will fail is most browsers except the most recent ones. IMHO, the author's theme would be much better served by not embedding fonts and instead to use a conventional CSS font stack perhaps augmented with suitable free Google webfonts - but that is of course a secondary consideration to the copyright one.

nitishchopra’s picture

nitishchopra commented

Dear @gisle @drupal community,

I apologize for this issue, I was unaware of the fact about licensing ,

I have removed all the fonts, which were causing issue and have commited with the command with the message git commit -m 'Issue #2742977: Copyright violation in Triculin repo. Immediate removal necessary'

As i have no access to push the code please guide me how to move forward with this,

Best Regards
Nitish

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

nitishchopra wrote:

I was unaware of the fact about licensing

What do you mean? What was you "unaware of"?. On your personal profile page, there is a Git agreement that you have committed to. You have violated three of the five points on this list (emphasised below).

  1. I agree to the Drupal Code Repository Terms of Service.
  2. I have read and will adhere to the Drupal Code of Conduct.
  3. I will cooperate with the Drupal Security Team as needed.
  4. I will only commit GPL V2+-licensed code and resources to Drupal code repositories.
  5. I will only commit code and resources that I own or am permitted to distribute.

As i have no access to push the code please guide me how to move forward with this

AFAIK, the project page is just unpublished. The repo is still there and you still own it. Have you tried this: Remove the fonts from your local copy, rebase it to purge the fonts from the history, and push again?

However, this assumes that this is all basic git usage. If this involves more advanced git-foo, you may need assistance from the Drupal.org webmasters.

nitishchopra’s picture

nitishchopra commented

I was unaware about the font is owned by Adobe, I thought it is an open source font,I have removed the fonts and has done the commit with the message with issue number but i am not able to push that.

Best Regards
Nitish

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

I was unaware about the font is owned by Adobe, I thought it is an open source font.

But please understand that committing an open source font you did not create yourself to our repo would also be a violation of our Git repo policy. Please read this page about committing third party libraries and content again.

I have removed the fonts and has done the commit with the message with issue number but i am not able to push that.

I'm afraid cannot help you with that. Things get more rigid as soon as a sandbox is converted into a full project, so you just have to be patient.

killes@www.drop.org’s picture

killes@www.drop.org commented

Since the project is new and not used by anybody, I propose that we delete it and let Nitish recreate it. That would take care of the git history problem too.

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

Since the project is new and not used by anybody, I propose that we delete it and let Nitish recreate it.

Sounds like a good plan. He is git vetted, so he should be able to do that.

killes@www.drop.org’s picture

killes@www.drop.org commented

let's wait for him to confirm he has the most recent code.

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

Perhaps we should change the short name (machinename) of the one destined for deletion? I assume he shall want to reuse the namespace, and without renaming I believe that namespace will be blocked.

killes@www.drop.org’s picture

killes@www.drop.org commented

I'd rather

1) wait for confirmation

2) delete

3) recreate

I am not quite sure what would happen if we'd change the shortname.

nitishchopra’s picture

nitishchopra commented

Dear @killes,@gisle

Thanks a lot for your support,

Please go ahead and delete it, I will recreate it.

Thanks

killes@www.drop.org’s picture

killes@www.drop.org commented

done

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented

nitishchopra,
make sure the fonts are gone from git history before you recreate it.

The best way is to delete .git and then start with a fresh history, like this (provided you're on something that runs Gnu/Linux or Unix):

rm -rf .git
git init
avpaderno’s picture

avpaderno
he/him
Primary language Italian
Location Brescia, 🇮🇹 🇪🇺
commented
Component: Project/Git problem » Other

I am changing the component, since we are going to remove it (#2429445: Further clean up components in the Drupal.org site moderators queue).

avpaderno’s picture

avpaderno
he/him
Primary language Italian
Location Brescia, 🇮🇹 🇪🇺
commented
Status: Needs review » Fixed

It seems the font file is not anymore present in the recreated project.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.