GitHub - Can I legally commit proprietary source code in a private repository?
<p>I maintain an open-source application project, which I committed in a public GitHub repository. The source code I wrote is open-source (under MIT license) and owned by me, however it depends on a third-party library, for which the source code is proprietary of its providing company.</p>
<p>Of course I bought a copy of this library, however for practical reasons I want to create a private GitHub repository, on which I think commit this proprietary source code and link it as a sub-module in my public application project.</p>
<p>I performed a test to check if a thus created private sub-module may be accessed by anyone from my public application project, and it seems it's not the case, although the sub-module appears as a link, which is exactly what I wanted: an access to this sub-module for me exclusively, and no access for any person which just want to get my source code.</p>
<p>However is a such practical legal? I.e can I commit the proprietary source code of another company in a private repository I own, if this repository cannot be accessed by other persons than me?</p>

<p>Per the comment, the applicable license term seems to be</p>
<blockquote>
<p>Licensee agrees to maintain in confidence the source code version of
the Licensed Software by using at least the same physical and other
security measures as Licensee uses for its own confidential technical
information and documentation, but in no case less than reasonable
measures.</p>
</blockquote>
<p>So if your own code is on a physically unconnected thumbprint-secured blah blah blah computer deep in a mountain, with files encrypted, so must theirs be. If yours is stored in &quot;the cloud&quot; with decent password protection, theirs must be as well. This seems to describe your Github use (I don't have any knowledge of the degree of hackability of private Github repositories). The legal judgment as to whether this is &quot;reasonably secure&quot; is based on whether a prudent person would know that it is practical to gain unauthorized access. Protecting a file with the password &quot;password&quot; would probably be found to be unreasonably insecure.</p>

copyright privacy open-source-software