LicenseGuard

GPL-2.0-only vs GPL-3.0-only

A version bump that changed what you must hand over with a device.

Can you use them, and where?

For every way of shipping software, GPL-2.0-only and GPL-3.0-only reach the same verdict. Whatever separates them, it is not the obligation to disclose source. Read each license's own page for what else differs — patent grants and notice requirements are the usual answer.

Side by side

Runtime dependency, dynamically linked. A build-time-only dependency reaches no user and carries no distribution obligation, whichever license it uses.

How you shipGPL-2.0-onlyGPL-3.0-only
Hosted SaaS No obligation No obligation Same
Distributed binary Obligation triggered Obligation triggered Same
On-premises delivery Obligation triggered Obligation triggered Same
Internal use only No obligation No obligation Same
Published library Obligation triggered Obligation triggered Same

GPL-2.0-only

Strong copyleft. Distributing a work that incorporates GPL-2.0 code requires licensing the whole work under GPL-2.0 and providing corresponding source. It has no network clause, so running it as a hosted service is not distribution.

Full obligations for GPL-2.0-only

GPL-3.0-only

Strong copyleft, with added anti-tivoization and patent-retaliation terms over v2. Like v2, its obligations attach to distribution, not to operating a hosted service.

Full obligations for GPL-3.0-only

Want to know which of these your project actually depends on?

Check your whole manifest →

LicenseGuard reports information derived from published license texts and dependency manifests. It is not legal advice and using it does not create an attorney-client relationship. Results reflect license metadata as declared; they do not identify every obligation or violation. Consult qualified counsel for decisions that matter.

Listed in the official MCP registry, on Glama and on Smithery. Source on GitHub (Apache-2.0).