I've recently become affiliated with a small-ish for-profit corporation that makes an industry-specific web-based software application. This application runs on Drupal 6.22, which is licensed under the GPLv2. This is commercial software. The entirety of the software is distributed in encrypted form (usually as an encrypted VM without shell access). We do not offer a copy of the source code to our customers in any form, nor would we presently grant any requests to obtain a copy of any portion of the source code (most of which is stock Drupal). Our company is located in the United States but does business internationally as well as locally.
So I have a two-part question for you:
Are we in violation of the Drupal license?
If we are, does anybody actually care?
I'm concerned about the legal implications of our present model, but we currently do not have any sort of consensus on either of these questions. I'm hoping that some of you who are involved with the project will be willing to respond to this anonymous post and share your insights so that I might pass them on to my superiors.
P.S. This is a duplicate of a post I made on the general forum. It was suggested that I re-post it here. Please also understand that I am posting this on my own personal initiative, so I cannot disclose any identifying information about my company or its products. Though I haven't sought authorization to post this, I will be showing it to them later if enough of you comment on it.
I'll also setup a corresponding poll to make it easier for my superiors to see at a glance what the prevailing sentiment within the Drupal community is. As an OSS developer, I've been working with the GPL for over 10 years so I already know what the answer will be. I just need you guys to provide a "second opinion". Thanks! =)