## License incompatibility

#5
by xixi126 - opened

Hi,I'd like to report a license conflict in alimama-creative/SDXL-EcomID. I noticed that this model was finetuned from stabilityai/stable-diffusion-xl-base-1.0, but it's currently published under the Apache-2.0 license. After taking a look at the OpenRAIL++ License— a license that includes non-permissive terms such as use-based restrictions and attribution requirements. However, this derivative model is currently published under the Apache-2.0 license, which is very permissive and does not carry over those restrictions.

⚠️ Key conflicts with the OpenRAIL++ License:

Section III 
4.Redistribution and Derivatives:
  •  Redistribution must include use-based restrictions (Attachment A), which Apache-2.0 does not require.
  •  Must provide a copy of the OpenRAIL++ license with any distribution — currently missing.
Attachment A – Use Restrictions:
  •  Prohibits specific uses (e.g., discrimination, surveillance, medical diagnosis, legal decision-making). These restrictions are not enforceable under Apache-2.0, which explicitly permits nearly any use.

On the other hand, Apache-2.0 allows:

•  Sublicensing under different terms 
•  Unrestricted commercial use
•  No requirement to pass down upstream ethical or use-based constraints

This creates a clear mismatch: OpenRAIL++ imposes enforceable use limitations and distribution conditions that cannot be removed, while Apache-2.0 explicitly permits those removals.

🔹 Suggestion:

  To comply with OpenRAIL++ license terms, it might be helpful to:
  • Include a copy of the OpenRAIL++ license in the repository or model card
  • Add a notice that the model inherits ethical use restrictions from the upstream model:   
  • Mention that commercial use is restricted, and clarify what uses are not allowed (from Attachment A)
  • Remove the Apache-2.0 license tag if the full model is not entirely under that license

This would help ensure downstream users are not misled into thinking the model is fully Apache-2.0 compliant, which it likely is not.

Hope this helps! 😊 Let me know if you have any questions or need more info.

Thanks for your attention!

alimama-creative org

This appears to be a misunderstanding. alimama-creative/SDXL-EcomID is not a fine-tuned model derived from stabilityai/stable-diffusion-xl-base-1.0. Instead, it's a plugin/extension designed to work with SDXL. As an independent plugin model rather than a derivative work, it is not subject to OpenRAIL++ license restrictions and can use its own Apache-2.0 license. Therefore, there is no license compatibility issue.

Thank you for bringing this to our attention!

Just to clarify where my original assumption came from — on the Hugging Face model page, the “Model tree” view indicated a finetune relationship between SDXL-EcomID and stable-diffusion-xl-base-1.0. Based on that, I had mistakenly assumed it was a derivative model, which would potentially bring it under the OpenRAIL++ license terms.

Thanks for your timely response and for helping to clear up the misunderstanding!

Sign up or log in to comment