License Violations 2013-2015 Incident #70

Versata / XimpleWare

Estimated Financial Impact
$300M sought; 5+ lawsuits
Blast Radius
GPL discovered during unrelated litigation

What Happened

Versata incorporated XimpleWare's GPL-licensed VTD-XML parser into proprietary software, stripped the license text and copyright notices, and distributed it commercially. The violation was discovered accidentally during unrelated litigation when Ameriprise examined Versata's code. XimpleWare sought $300M in damages; the case spawned five separate court proceedings.

Sources: CIO magazine analysis

✓

Risk Guard: Caught

LICENSE_RESTRICTION_DERIVATIVE_WORK_COPYLEFT.

Risk Guard Check Codes That Flag This Incident

LICENSE_RESTRICTION_DERIVATIVE_WORK_COPYLEFTLICENSE_REFERENCE_MISSING_FILEPACKAGE_NO_LICENSE

How Every Tool Performed

5 Caught 1 Partial 0 Missed
Tool Verdict Details
OSS Risk Guard Caught LICENSE_RESTRICTION_DERIVATIVE_WORK_COPYLEFT.
Socket Partial Has license scanning but not primary focus
Snyk Caught License compliance scanning
Sonatype (Nexus) Caught License compliance in Lifecycle product
Black Duck Caught Industry-leading license compliance; largest knowledge base
Endor Labs Caught License compliance scanning
← Hellwig/SFC v. AVM Tendermint GPL contamination →