HN comment from a major maintainer here : https://news.ycombinator.com/item?id=38314427
Valve has confirmed that it violates the HLSDK EULA, too. At least for the original Xash3D release.