Pull request #10974 introduces the @bitwarden/sdk-internal dependency which is needed to build the desktop client. The dependency contains a licence statement which contains the following clause:

You may not use this SDK to develop applications for use with software other than Bitwarden (including non-compatible implementations of Bitwarden) or to develop another SDK.

This violates freedom 0.

It is not possible to build desktop-v2024.10.0 (or, likely, current master) without removing this dependency.

you are viewing a single comment's thread
view the rest of the comments

[–] RvTV95XBeo@sh.itjust.works 3 points 2 months ago* (last edited 1 month ago) (2 children)

I know little about Proton Pass, but how confident are you they don't also use a proprietary SDK with their open source apps?

[–] qaz@lemmy.world 2 points 2 months ago (1 children)

Their Android client is licensed under GPLv3

[–] RvTV95XBeo@sh.itjust.works 3 points 2 months ago

Cool, so is Bitwarden, hence my concern

[–] KLISHDFSDF@lemmy.ml 2 points 1 month ago

Proton pass client doesn't currently use a proprietary SDK, but they also haven't made the same blunder as Bitwarden, which they've since fixed, but still not a good look.

On another note - I did export/import all my passwords into proton pass and WOW the speed and UX feels so much better. I'm still sticking with Bitwarden as they've been really good so far, but there's a real good alternative should they ever "turn evil".