Post-Mortem: OpenTaco using code from OTF without attribution (blog.digger.dev)

On September 24, 2025 Digger launched Project OpenTaco and was subsequently flagged by leg100, creator of the OTF project, for including code copied or adapted from OTF without attribution. The team confirms the reuse: several internal files (tfe_id.go, tfe_kind.go, tfe_org.go, tfe_workspace.go, tfe/organizations.go, tfe/well_known.go, tfe_workspaces.go) contain copied or adapted elements such as TFEID and parsing functions, Kind enums, organization/workspace domain structs and entitlements, DiscoverSpec/GetWellKnownJson logic, and workspace conversion/GetWorkspace helpers. The root cause was a prototype workflow—code moved from an internal POC repo (preserving history with git filter-repo) into the main repo without attribution, compounded by a rush to launch and lack of attribution guidelines. Technically and socially this matters: reusing domain models, parsing utilities and API stubs without attribution violates open-source norms, can raise license and trust concerns, and undermines collaboration in the Terraform/infra tooling ecosystem. Digger’s remediation includes adding attributions (PR #2262), changing the project license from Apache 2.0 to MIT (PR #2263), and instituting explicit attribution guidelines (PR #2264), plus an apology and invitation to the community to advise on any further reparations. These steps aim to restore trust and prevent similar lapses in future prototypes and integrations.