Pull request #10974 introduces the @bitwarden/sdk-internal dependency which is needed to build the desktop client. The dependency contains a licence statement which contains the following clause:

You may not use this SDK to develop applications for use with software other than Bitwarden (including non-compatible implementations of Bitwarden) or to develop another SDK.

This violates freedom 0.

It is not possible to build desktop-v2024.10.0 (or, likely, current master) without removing this dependency.

you are viewing a single comment's thread
view the rest of the comments

[–] KLISHDFSDF@lemmy.ml 11 points 2 weeks ago (1 children)

Looks like I might be moving to Proton Pass after all! I'll give them some time to see what they do about this, but will happily give my money to someone else and migrate friends/family as well.

[–] RvTV95XBeo@sh.itjust.works 3 points 2 weeks ago* (last edited 1 week ago) (2 children)

I know little about Proton Pass, but how confident are you they don't also use a proprietary SDK with their open source apps?

[–] qaz@lemmy.world 2 points 2 weeks ago (1 children)

Their Android client is licensed under GPLv3

[–] RvTV95XBeo@sh.itjust.works 2 points 2 weeks ago

Cool, so is Bitwarden, hence my concern

[–] KLISHDFSDF@lemmy.ml 1 points 1 week ago

Proton pass client doesn't currently use a proprietary SDK, but they also haven't made the same blunder as Bitwarden, which they've since fixed, but still not a good look.

On another note - I did export/import all my passwords into proton pass and WOW the speed and UX feels so much better. I'm still sticking with Bitwarden as they've been really good so far, but there's a real good alternative should they ever "turn evil".