Skip to content

Commit 112f189

Browse files
WatanabehatoWatanabehato
authored
docs: add AGPL DMCA/abuse reporting template (#258)
1 parent 3a87f4c commit 112f189

2 files changed

Lines changed: 159 additions & 0 deletions

File tree

‎docs/zh_cn/develop/README.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@
2727
|------|------|
2828
| [自定义动作开发](./custom-action.md) | Python CustomAction 编写、Controller API、Pipeline 集成 |
2929
| [节点测试](./node-testing.md) | 如何编写和运行节点测试，验证识别是否稳定命中 |
30+
| [DMCA / Abuse 提报模板](./dmca-abuse-template.md) | 仿冒/搬运/带毒仓库的一键复用提报文案（AGPL-3.0） |
3031
| [DeepWiki — MaaNTE](https://deepwiki.com/1bananachicken/MaaNTE) | 带 AI 的在线项目文档速览 |
3132
| [Pipeline 协议](https://maafw.com/docs/3.1-PipelineProtocol/) | MaaFramework 官方 Pipeline 协议全文 |
3233

‎docs/zh_cn/develop/dmca-abuse-template.md‎

Lines changed: 158 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,158 @@
1+
# GitHub DMCA / Abuse 提报模板（AGPL-3.0）
2+
3+
用于针对仿冒仓库、搬运仓库、带毒二进制仓库进行快速提报。
4+
5+
适用对象：
6+
- 我方为版权方（或版权方授权代表）
7+
- 原项目采用 AGPL-3.0
8+
- 对方仓库存在未合规分发、伪装发布、恶意样本风险
9+
10+
## 官方入口
11+
12+
- DMCA（版权移除）：<https://github.com/contact/dmca>
13+
- Abuse（滥用/恶意分发）：<https://support.github.com/contact/report-abuse?category=report-abuse&report=other&report_type=unspecified>
14+
15+
建议两条都提：`DMCA` 处理版权，`Abuse` 处理安全风险。
16+
17+
## 提报前准备清单
18+
19+
1. 原仓库 URL（官方仓）
20+
2. 被举报仓库 URL（侵权仓）
21+
3. 侵权样本下载 URL（Release 链接）
22+
4. 样本哈希（SHA256）
23+
5. 检测结论（如 `QVM.Gen.196650`）与检测报告文件
24+
6. AGPL-3.0 违反点（源码提供、修改说明、许可声明等）
25+
7. 联系方式（姓名、邮箱、地址、电话）
26+
27+
## DMCA 表单逐项模板
28+
29+
以下字段按 GitHub 表单常见问题顺序整理，可直接复制。
30+
31+
### Are you the copyright holder or authorized...?
32+
33+
```text
34+
Yes, I am the copyright holder.
35+
```
36+
37+
如为代理：
38+
39+
```text
40+
I am authorized to act on behalf of the copyright owner.
41+
```
42+
43+
### Please describe the nature of your copyright ownership...
44+
45+
```text
46+
I am the copyright owner of the original MaaNTE source code, associated release artifacts, and accompanying documentation, and I hold the exclusive rights to reproduce, distribute, and prepare derivative works. I have not authorized the repository identified in this notice to copy, publish, or distribute those copyrighted materials.
47+
```
48+
49+
### Please provide a detailed description of the original copyrighted work...
50+
51+
```text
52+
The original copyrighted work is the MaaNTE project, which is copyrighted by us and released under the GNU Affero General Public License v3.0 (AGPL-3.0). Our work includes the source code, build and packaging scripts, task/pipeline definitions, UI assets, and release artifacts. AGPL-3.0 allows copying and redistribution only if license conditions are met, including preservation of copyright and license notices, clear notice of modifications, and provision of the complete corresponding source code for distributed binaries (including required build/install scripts), and, where applicable, source availability to remote network users under AGPL Section 13. The reported repository/release reproduces and distributes our copyrighted work (or derivative work) without satisfying these AGPL-3.0 conditions, so the distribution is unauthorized.
53+
```
54+
55+
### If the original work ... is available online, please provide a URL.
56+
57+
```text
58+
https://github.com/1bananachicken/MaaNTE
59+
https://docs.maante.org
60+
```
61+
62+
### Entire repository or specific files?
63+
64+
整仓侵权时使用：
65+
66+
```text
67+
Based on the above, I confirm that the entire contents of the repository are infringing.
68+
```
69+
70+
### Identify the full repository URL that is infringing:
71+
72+
```text
73+
https://github.com/<user>/<repo>
74+
```
75+
76+
### Do you claim to have any technological measures...?
77+
78+
```text
79+
No. This notice is based on copyright/license infringement (AGPL-3.0 non-compliance), not anti-circumvention.
80+
```
81+
82+
### Forks 字段
83+
84+
- 未逐个核查时：
85+
86+
```text
87+
None at this time. I am currently reporting only the parent repository. If infringing forks are identified, they will be submitted separately.
88+
```
89+
90+
- 仅当 fork 网络超过 100 且你确实抽样核查后，才使用 “all or most forks are infringing” 语句。
91+
92+
### Is the work licensed under an open source license?
93+
94+
```text
95+
Yes.
96+
```
97+
98+
### Which license?
99+
100+
优先选择 `GNU Affero General Public License v3.0 (AGPL-3.0)`。
101+
若表单下拉没有 AGPL，选择最接近项并在后续描述中明确写 `AGPL-3.0`。
102+
103+
### How do you believe the license is being violated?
104+
105+
```text
106+
I believe the license is being violated because the repository and its release artifacts distribute a modified/repackaged version of our AGPL-3.0 work without complying with AGPL conditions. In particular, the distribution does not provide the complete corresponding source code for the exact binaries being distributed, does not provide clear/prominent notices of modifications and provenance, and does not preserve required license/copyright notices in a compliant manner. As a result, the redistribution is outside the scope of AGPL-3.0 permissions (including obligations under AGPL v3 sections 4–6, and section 13 where applicable).
107+
```
108+
109+
### What changes can be made to bring the project into compliance...?
110+
111+
```text
112+
To bring the project into AGPL-3.0 compliance, the maintainer must do one of the following:
113+
1) Remove all infringing content and release artifacts; or
114+
2) Fully comply with AGPL-3.0 for all distributed binaries by:
115+
- Publishing the complete corresponding source code for the exact released binaries (including build/install scripts and required dependencies/instructions).
116+
- Keeping copyright notices and including the full AGPL-3.0 license text.
117+
- Clearly marking all modifications and their dates, and identifying upstream origin.
118+
- Providing prominent notice in the repository and releases that the work is AGPL-3.0 licensed and where the source can be obtained.
119+
- If the software is used over a network, providing source access to remote users as required by AGPL-3.0 Section 13.
120+
Until these conditions are met, distribution of the current repository/release artifacts should stop.
121+
```
122+
123+
### Do you have the alleged infringer’s contact information?
124+
125+
```text
126+
Only public contact information is known:
127+
- GitHub username: <user>
128+
- Profile: https://github.com/<user>
129+
- Repository: https://github.com/<user>/<repo>
130+
I do not have verified private contact details (email/phone/address).
131+
```
132+
133+
## Abuse Report 附加模板（带毒产物）
134+
135+
用于强调“发布产物存在恶意风险”，建议和 DMCA 同时提交。
136+
137+
```text
138+
The repository release artifact appears malicious based on security testing.
139+
The tested sample SHA256 is <sha256>, and it was detected by a security engine as: QVM.Gen.196650 (generic malware detection).
140+
Please review and take action under GitHub’s Active Malware/Abuse policies.
141+
```
142+
143+
中文版可用：
144+
145+
```text
146+
仓库产物存在安全风险。我们对该仓库发布的可执行文件进行了检测，样本 SHA256 为 <sha256>，被安全引擎检出为：QVM.Gen.196650（恶意程序泛型检测）。请 GitHub 按 Active Malware/Abuse 政策复核并处置相关发布内容。
147+
```
148+
149+
## 归档建议
150+
151+
每次提报后，建议在内部记录：
152+
- 提报时间（UTC+8）
153+
- 目标仓库 URL
154+
- 样本 SHA256
155+
- 工单编号（GitHub 返回）
156+
- 当前状态（submitted / follow-up / resolved）
157+
158+
这份模板可直接复制到新案件，按 `<...>` 占位符替换即可。

0 commit comments

Comments
 (0)