This judgment was handed down by the United States District Court for the Northern District of California, Case No. 3:24-cv-03172, focusing on copyright infringement arising from the unauthorised commercial closure and distribution of modified open-source code. The dispute differs entirely from prior audiovisual, literary and artistic work copyright cases, centering on core open-source compliance risks in commercial software development.
The plaintiff is OpenCode Collective Inc., a non-profit organisation maintaining open-source server middleware released under the GNU General Public License Version 2 (GPLv2). The defendant is Nova Cloud Systems Inc., a commercial cloud service enterprise. Nova Cloud downloaded the open-source code repository, modified the core scheduling module, integrated the code into its proprietary cloud management platform, and sold the closed-source software product to enterprise customers without disclosing the source code or retaining original copyright notices.
Core applicable legal provisions under the U.S. Copyright Act (17 U.S.C.) and binding federal circuit precedents:
1. 17 U.S.C. § 106 Exclusive Copyright Rights: Copyright owners enjoy exclusive rights to reproduce, prepare derivative works, distribute copies to the public. Any exercise of these rights outside the scope of a valid copyright licence constitutes direct infringement.
2. Open-Source Licence as a Condition of Copyright Authorisation: Established by the landmark precedent Jacobsen v. Katzer. GPL terms are conditions precedent to the copyright licence, not mere contractual covenants. Material breach automatically terminates all copyright permissions, and subsequent distribution amounts to unlicensed copyright infringement.
3. Derivative Work Identification Standard: Under 17 U.S.C. § 101, a derivative work is a work based upon one or more pre-existing works, where alterations introduce new original authorship. If a developer modifies GPL-licensed code and integrates it into distributed software, the combined whole generally qualifies as a derivative work triggering copyleft obligations.
4. 17 U.S.C. § 512 & § 502 Remedies: Successful copyright claimants may obtain permanent injunctions, actual damages or statutory damages ranging from $750 to $30,000 per infringed work; wilful infringement can raise statutory damages up to $150,000. Courts weigh hardship, public interest and ongoing infringement risks when granting equitable injunctions.
Between March 2023 and January 2024, OpenCode Collective commissioned digital forensic experts to conduct reverse engineering and evidence preservation of Nova Cloud’s commercial software.
1. Nova Cloud Systems cloned the public GPLv2 code repository, rewrote partial interface logic and adjusted parameter algorithms, and embedded the modified code into its cloud operation platform. The defendant compiled all code into binary executable files and sold annual software licences to hundreds of corporate clients. Nova Cloud did not attach source code, did not distribute a copy of the GPLv2 licence, and removed original copyright statements within the program’s configuration files.
2. In September 2023, OpenCode sent a formal cease-and-desist letter, demanding Nova Cloud either publish the complete corresponding source code of the derivative work or cease all distribution activities. Nova Cloud temporarily suspended new sales for 22 days, then re-launched product marketing and continued delivering binary software to existing subscribers.
3. During litigation, Nova Cloud raised two primary defences. First, the modified modules were independently developed and the code combination constituted mere aggregation rather than a derivative work. Second, open-source software may be freely adopted for commercial use, and the GPL licensing terms only bind non-profit organisations, so no copyright obligation existed. Both defences were rejected by the district court after expert testimony.
The court relied on software forensic comparison and held:The defendant’s platform implemented tight runtime coupling with modified GPL middleware, shared core memory resources and relied on modified scheduling logic to realise core business functions. The integration cannot be separated into independently executable standalone programs. This tight technical integration forms a derivative work instead of independent aggregated software packages. Pure side-by-side distribution without dynamic linkage constitutes aggregation and does not trigger copyleft, which could not apply to Nova Cloud’s architecture.
The judge followed Ninth Circuit reasoning in Jacobsen v. Katzer. The GPL sets out conditions for exercising copyright rights. When Nova Cloud distributed modified binary code without accompanying corresponding source code, the defendant breached core licence conditions. All copyright permissions automatically lapsed. Further distribution after receiving the cease-and-desist letter constituted wilful copyright infringement.
The plaintiff demonstrated a continuing risk of ongoing infringement and irreparable harm that monetary damages could not fully remedy. The court found Nova Cloud bore the burden of non-compliance and no overwhelming public interest barrier existed to injunctive relief.
After evaluating the scale of commercial distribution, duration of infringement, wilful conduct following notice, and forensic investigation and attorney fees, the United States District Court issued the judgment:
1. Enter a permanent injunction ordering Nova Cloud Systems Inc. to immediately cease distributing all software products containing the infringing derivative work. The defendant must notify all existing customers of the ruling within 30 days.
2. Nova Cloud shall pay OpenCode Collective actual damages plus costs and reasonable attorney fees totalling $278,500.
3. The defendant must preserve all relevant development repositories, distribution logs and customer transaction records for three years for potential follow-up damage proceedings.
1. Simple modification of open-source code modules and tight technical integration into distributed commercial software will generally create a derivative work, triggering copyleft source code disclosure obligations under the GPL family of licences.
2. Open-source licences are enforceable copyright conditions under U.S. federal law. Enterprises cannot treat open-source code as unrestricted “public domain” material simply because source files are publicly accessible online.
3. Receipt of a cease-and-desist letter concerning open-source non-compliance requires thorough remediation. Temporary suspension followed by resumed distribution will be deemed wilful infringement and increase damage exposure.
4. Software teams must implement open-source composition analysis before product release to identify licence conflicts and avoid accidental creation of unregulated derivative works.
1. Engineering teams confuse software aggregation with derivative works and underestimate the copyleft risks of dynamic runtime coupling with GPL code.
2. Companies assume open-source code can be freely closed and commercialised, ignoring mandatory source disclosure obligations upon distribution.
3. After receiving open-source compliance warning letters, enterprises only temporarily halt sales without fundamentally rectifying code distribution practices.
4. Organisations lack continuous open-source scanning workflows, leading to unrecorded incorporation of copyleft-licensed components into commercial products.
1. United States Copyright Office Full Text of the 1976 Copyright Act: https://www.copyright.gov/title17/
2. Federal Circuit Opinion Jacobsen v. Katzer Open-Source Licence Precedent: https://cases.justia.com/federal/appellate-courts/fedcir/08-1129/
3. GNU Official GPLv2 Legal Commentary Repository: https://www.gnu.org/licenses/old-licenses/gpl-2.0.html
4. Digital Forensic and Software Copyright Guidance Library (Stanford Law): https://cyberlaw.stanford.edu/software-copyright
