Skip to content

Missing MIT License Notice in Major Releases – Legal Notice to Maintainers #3430

Open
@Marak

Description

@Marak

Pre-Checks

  • Follow our Code of Conduct.
    Read the docs.
    Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
    Make sure this is a Faker issue and not related to a combination with another package.
    Check that this is a concrete bug. For Q&A open a GitHub Discussion or join our Discord Chat Server.
    The provided reproduction is a minimal reproducible example of the bug.
    I am willing to provide a PR.

Describe the bug

To: @pkuczynski @ST-DDT @Shinigami92 @damienwebdev @xDivisionByZerox @ejcheng @MilosPaunovic

I’m Marak Squires, the original creator of faker.js, released under the MIT License in 2011 with my copyright notice (“Copyright (c) 2011 Marak Squires”). Your team released a major version without this notice, accumulating millions of npm downloads over months—each one violating the MIT License’s mandatory attribution clause. You’ve since corrected it, but past distributions remain unaddressed.

This isn’t trivial. Under US law (17 U.S.C. § 106), each download without my notice is copyright infringement—potentially millions of instances, with statutory damages of $750 to $30,000 per work, or $150,000 if willful. For maintainers in Germany, this also risks breaching § 97 UrhG, with damages and legal fees (§ 97a UrhG). That’s lawsuits, six-figure exposure, personal liability. I’ve not pursued legal action yet—I want your response first.

This is a public notice:

  • How do you explain omitting my notice for millions of downloads?
  • What’s your official plan to address this period—financially or otherwise?
  • How will you ensure this never happens again?

Respond here by March 10, 2025. Your replies—or silence—will guide my next steps, legal or otherwise. This is my work, my rights; dismissal only escalates matters.

Marak Squires
Original faker.js Author

Minimal reproduction code

No response

Additional Context

No response

Environment Info

Github / NPM

Which module system do you use?

  • CJS
    ESM

Used Package Manager

npm

Activity

locked and limited conversation to collaborators on Mar 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @Marak

        Issue actions

          Missing MIT License Notice in Major Releases – Legal Notice to Maintainers · Issue #3430 · faker-js/faker