As per https://github.com/git/git/blob/master/README.md portions are licensed under different licenses than GPL-2. https://github.com/git/git/tree/master/sha1dc or https://github.com/cr-marcstevens/sha1collisiondetection/tree/855827c583bc30645ba427885caa40c5b81764d2 (either on gets pulled in) is MIT https://github.com/git/git/tree/master/reftable is BSD https://github.com/git/git/tree/f1ed9d7dc0e49dc1a044941d821c9d2342313c26/git-gui is GPL-2+ (needs use-flag tk) (https://github.com/git/git/blob/f1ed9d7dc0e49dc1a044941d821c9d2342313c26/git-gui/git-gui.sh#L17) Reproducible: Always