Possible GPL violation in package distribution