ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

The GNU General Public License version 3 (GPLv3) is a strong "copyleft" license. When a GPL-licensed component is combined into a larger work in a way that creates a derivative (for example, by static linking), the entire derivative work must be distributed under the GPL as well. This compels the distributor to provide recipients with the complete corresponding source code and to grant them the same rights to modify and redistribute it. If a proprietary application incorporates a GPLv3 library in a manner that creates a derivative work, the company could be legally required to open-source its own code, undermining its intellectual-property and commercial strategy.

The GPL does not flatly prohibit distribution through app stores, although some store terms may create practical conflicts. It also does not impose export-control obligations, nor does it automatically invalidate existing patents-rather, it includes a patent grant but does not cancel patents. Therefore, the primary legal risk is the obligation to disclose and relicense the proprietary application's source code under GPL terms.