[jraph]

They can't, but they could do something like GRSecurity, saying that they would end their contract with / stop giving anybody who distributes it further updates.