Bitwarden users have raised concerns following a recent update to the Bitwarden client that includes the new bitwarden/sdk-internal dependency. This dependency carries a license clause restricting its use to applications compatible with Bitwarden, prohibiting its use for developing non-compatible software or other SDKs. Bitwarden, known for its open-source password management software, has traditionally operated under a freemium model and supports various clients and platforms with an encrypted vault.
The clause has sparked apprehension among users on GitHub, who fear it could indicate a shift towards proprietary software, despite Bitwarden's open-source claims. Addressing these concerns, Bitwarden founder and CTO Kyle Spearrin clarified that the SDK's integration aims to ensure GPL compatibility while maintaining separate repositories for the SDK and client. Spearrin emphasized that the communication between these programs via standard protocols does not equate to them being a single program under GPLv3.
The community is closely watching how Bitwarden navigates this situation, particularly regarding its commitment to open-source principles.