| ▲ | 'Source available' is not open source (and that's okay)(dri.es) |
| 104 points by geerlingguy 7 hours ago | 113 comments |
| |
|
| ▲ | jillesvangurp 2 hours ago | parent | next [-] |
| I always wonder why people bother with providing source under a source available license. It makes outside contributions a lot less likely. Your active community of people working on the code base effectively becomes your employees. There's little to no benefit to outside users. Any work they do on the code is effectively free work they do for you that entitles them to nothing. Including free usage and distribution of the work they did. It's not likely to be helpful. My attitude to source available products is the same as to proprietary products. I tend to limit my dependency on those. Companies have short life spans. Many OSS projects I use have a history of surviving the implosion of companies that once actively contributed to them. Developer communities are much more resilient than companies. Source unavailable effectively becomes source unavailable when companies fail. Especially VC funded companies are kind of engineered (by VCs) to fail fast. So, it's just not a great basis for making a long term commitment. If something like Bun (recently acquired by anthropic) becomes orphaned, we'd still have the git source code and a permissive license. Somebody could take over the project or fork it or even create a new company around it. Some of the original developers would probably show up. A project like that is resilient against that. And projects like that have active contributors outside of the corporate context that provide lots of contributions. Because of the license. You don't get that without a good OSS license. I judge software projects by the quality of their development communities. It needs to have diversity, a good mix of people that know what they are doing, and a broad enough user community that the project is likely to be supported in perpetuity. Shared source provides only the illusion of that. Depending on them is risky. And that risk is rarely offset by quality. Of course people use proprietary software for some things. And that's fine. I'm no different. But most of the stuff I care about is OSS. |
| |
| ▲ | comex 23 minutes ago | parent | next [-] | | Counterpoint: I’ve often wished the proprietary software I use was source-available so that I could fix bugs for myself. The idea of doing free work for a company does feel weird. But when some bug is really getting on my nerves, being able to fix it and not have to deal with it anymore is a huge benefit! | |
| ▲ | bloppe 2 hours ago | parent | prev | next [-] | | The BUSL license requires shifting to an open-source license no later than 4 years after publication. I'd be happy to contribute to a BUSL-licensed project knowing my contributions will shift to an MIT license within 4 years. And the original authors don't have to worry as much about Amazon eating their lunch. | | |
| ▲ | jillesvangurp an hour ago | parent [-] | | Good for you; you seem like a trusting person. I'd recommend against spending your time on that. Or at least try to get paid for it. I tend walk away from anything with a shared source license. I don't invest my time in it. I don't finish reading the README. It's an instant red flag. | | |
| ▲ | bloppe an hour ago | parent [-] | | The whole point of having a license is that you don't have to rely on trust. It's right there in the license. There's no way to weasel out of it. https://mariadb.com/bsl11/ "Effective on the Change Date, or the fourth anniversary of the first publicly available distribution of a specific version of the Licensed Work under this License, whichever comes first, the Licensor hereby grants you rights under the terms of the Change License" ... "To specify as the Change License the GPL Version 2.0 or any later version, or a license that is compatible with GPL Version 2.0 or a later version, where “compatible” means that software provided under the Change License can be included in a program with software provided under GPL Version 2.0 or a later version" |
|
| |
| ▲ | aatd86 34 minutes ago | parent | prev | next [-] | | Maybe that's the whole point. Entities which rely on the product enough to propose contributions are more likely to be paying customers who really need to have a given feature available? People seem to complain that they are burnt out by open source quite often so not sure that there are that many contributions apart from a couple projects. It may also protect a project against business vultures. If you are trying to monetize your project but someone richer than you forks it and offer it for free, what can you do? Yet, by being source available, the code is still auditable. It is easier for people to understand how the software works. And nowadays you can fine tune an LLM over it I guess... Seems that is might also be a valid perspective?
You can probably have a kind of bus clause so that source code does not become abandoned? | |
| ▲ | bullfightonmars an hour ago | parent | prev | next [-] | | In the case of Fizzy, the app that 37signals has made “source available”, the real motivation for publishing is form of advertising for Ruby on Rails. DHH is on a mission to show that you can write great software with way less bullshit than is in vogue. This code base is sparkling in its design. No build frontend, server side rendered templates, minimal js used primarily to drive interactivity, extremely simple models, jobs, and controllers. It has < 3000 lines of js with incredibly rich interaction design, when was the last time you saw that? | | |
| ▲ | ahartmetz 43 minutes ago | parent [-] | | >minimal js used primarily to drive interactivity Damn weirdos. Next you're going to tell me that you can deploy it without k8s or even a container?! /s |
| |
| ▲ | techterrier an hour ago | parent | prev | next [-] | | It's a way for SaaSy companies to do business in Europe. | |
| ▲ | KingMob an hour ago | parent | prev [-] | | > I always wonder why people bother with providing source under a source available license. I treat it as "business plus", not "FOSS minus". And of course, some source-available licenses convert to FOSS over time. > Any work they do on the code is effectively free work they do for you that entitles them to nothing. Funny, that's the same complaint FOSS companies have about AWS free-riding off their hard work and then competing. They switch to source-available licenses because a FOSS license allows flush FAANGs to exploit them. |
|
|
| ▲ | benrutter 3 hours ago | parent | prev | next [-] |
| I love open source, but I'd welcome less of it and more "source available" projects. I think several large coorporations are pushing the boundaries of what "open source" can actually mean in good faith. Especially several recent big name cases where profit models weren't thought out during start up and then licenses for projects aee suddenly changes. The term has erroded a lot recently, I'd be happy to see less, but more meaningful "open source" out there. |
| |
| ▲ | safety1st 3 hours ago | parent | next [-] | | I certainly don't have all the answers here but the entire $300B+ SaaS industry (and a bunch of other stuff that behaves like SaaS) was built in great part on a loophole in the GPL. More precisely, many of the people who licensed their code under GPL were eventually dismayed when they realized you could sell access to whatever you like built on top of that code, over a network, and you wouldn't have to distribute the source. The AGPL was devised to close this loophole. There are really two dynamics at play, one is that there are people who want to give a gift to the world and promote a culture of sharing, in fact they want to REQUIRE you to pay it forward if you use their stuff. That's the ethos behind GPL and AGPL. It has proven to be way more effective than the bean counters expected! The other dynamic is the more conventional profit making and taking which has perceived a loophole and used it to make some extra bucks on the backs of the nice sharing guys. I don't have anything against profits, I like money and I own a business where we choose to keep some code totally closed source because money. But you can't deny that this division exists. And I think this dynamic is what most of the dilemmas in the OSS world really arise from, there is a strain of altruism since the early days of the movement which has been betrayed, for many it feels awful if you've released GPL'ed code and then watched Big Tech promptly pile a bunch of proprietary code on top of it and use the resulting machine to strangle the freedoms of the human race over the Internet. You don't automatically get to squeeze profits from a thing just because it's out there and it's shiny and nice. That may not be why the author built it. It may be a betrayal of their intent if you do. | | |
| ▲ | Imustaskforhelp an hour ago | parent [-] | | I share your sentiment and would love to expand how I feel as if even AGPL isn't enough for cloud providers like Amazon, Google etc. which can just technically run it on their servers without too much modifications or release the modifications and still compete against the original AGPL party Personally I get worried that even AGPL might not be enough for me if I create a service which faces the public because if it gets large enough then companies technically can still call dibs on me and use their infrastructure to compete against me and I could do nothing... It was an interesting thought experiment and made me blur the lines between (Fully open source good, source available bad) to well... it depends. And I think everyone should have such nuance since I don't think we live in a world of black and white but its interesting to hear everyone's opinion on it as this topic gets raised every once in a while. | | |
| ▲ | immibis 15 minutes ago | parent [-] | | That's why SSPL was created. People working in tech companies have expressed extreme vitriol for SSPL - I wonder why. The SSPL isn't the best designed license, but it is "more AGPL than AGPL" |
|
| |
| ▲ | koolala 2 hours ago | parent | prev [-] | | Why? What is meaningful about sharing code with the threat of a lawsuit if someone copies it? Is sounds like you want the term to be erroded? | | |
| ▲ | NiloCK 2 hours ago | parent [-] | | User consent. Uninformed consent is not consent. You cannot meaningfully consent to running software on your devices, or running your life on software, when that software's source is unavailable. | | |
| ▲ | koolala 2 hours ago | parent [-] | | Why does that require there to be 'less open source'? Nothing is stopping that already today. Impact wise, everyday people can't use build tooling so this kind of thing only effects people that are 1 keystroke away from modifying the code and not being allowed to share it. |
|
|
|
|
| ▲ | Incipient 4 hours ago | parent | prev | next [-] |
| Personally I think differentiation between "open source" and "source available" is good. Open source, is, essentially software that I expect to be able to use commercially and tweak if required - but I'm own my own, and I pay for support. Source available means I can basically help debug issues I have...but I expect that a paid licence is required and will have a selection of limitations (number of nodes, etc). |
| |
| ▲ | bloppe an hour ago | parent | next [-] | | Most source-available licenses that I've encountered have no paid license requirements for users. They only require a paid license if you want to sell the product commercially. Normally, you're still allowed to use the software as a piece of a larger commercial product, as long as it does not compete with the original author, or "substantially reproduce the functionality" of the source-available bits, depending on the exact language. | |
| ▲ | bsder 3 hours ago | parent | prev | next [-] | | "Source Available" means that it can become "Source Unavailable" overnight. See the "Our Machinery" fiasco. Yes, Open Source isn't a complete defense against this (especially when there are copyright assignments). However, it sure makes it both a lot harder to pull off and a lot less useful to even try. | | |
| ▲ | bloppe an hour ago | parent [-] | | "Open Source" can also become "Source Available" overnight. See Redis, Terraform, etc. In the same vein, "Open Source" can also become "Closed Source" overnight. In neither case does the change apply retroactively. It only applies to new contributions after the license change. | | |
| ▲ | Imustaskforhelp an hour ago | parent [-] | | Well technically Redis had a fork before it became source available known as valkey which is still in bsd license Terraform was forked to create opentofu if I remember correctly I think the most recent example is kind of minio for this type of thing no? Also I am interested what are some open source projects which became closed source since it seems that you haven't named any and I am curious how they can do that. There must be some legal laws protecting it. | | |
| ▲ | bloppe 35 minutes ago | parent [-] | | If a project switches from an open-source to a closed-source license, then from the outside, it just looks like the project was abandoned. The final commit that was published under the open-source license will always be open source. It's the future commits that are now closed source. So no, I don't have any specific examples of that happening. In the case of both Redis and Terraform, the forks were announced after the license change, not before. Indeed, the forks were motivated by the license change. The community didn't get a warning "hey, we're about to change the license, fork it while you still can!". It just changed. That's what I mean when I say the license change does not apply retroactively. The commit of Terraform that existed before the license change is still open-source. I could create a fork branching off that commit today if I wanted to. |
|
|
| |
| ▲ | sofixa 4 hours ago | parent | prev [-] | | > Personally I think differentiation between "open source" and "source available" is good Maybe, but I think that "source available" isn't detailed enough and can mean many many different things. > Source available means I can basically help debug issues I have...but I expect that a paid licence is required and will have a selection of limitations (number of nodes, etc). Point in case. For me there is one group, under something like BSL or FSL or SSPL which mostly restricts you from competing with the project's creators (e.g. making your own SaaS out of it), but everything else is fair use, you can use it in prod to make money at any size, etc. And a separate, more restrictive one, which has size, or production restrictions (you can't run the software if you're a commercial entity). Source available sounds like a good description for the second one, because it's just available, little more. But for the first one where you can do whatever you want with one single exception that doesn't impact 99.9999% of potential users, it's not a good and clear enough description. | | |
| ▲ | Imustaskforhelp an hour ago | parent | next [-] | | People run with OSI initiative as it is and consider it the golden rule when I agree with your 99.9999% of potential users line. I think that *one blunder?) is that OSI cant really consider SSPL or similar open source because it restricts access to one party so it breaches an freedom 0 or some freedom of open source which is fair but at the same time literally only impacting people competing against (in my opinion the funding of the project and its growth itself) if someone like amazon had created a redis service competing against redis itself lets say I think its all kinda nuanced and we kinda need more discussion with source available. | |
| ▲ | bloppe 25 minutes ago | parent | prev [-] | | I agree with you the "source available" is overstretched. It's hard to come up with a good new label for the first group. Maybe "Open Use" or "Fair Source". |
|
|
|
| ▲ | koolala 2 hours ago | parent | prev | next [-] |
| I'm amazed how many people don't like open-source... Imagine the hellscape computers / the internet would be today if Linux was 'Source available'. |
| |
| ▲ | Imustaskforhelp an hour ago | parent [-] | | Some source available licenses are literally just modified open source with the addition of some clauses (mostly cloud related) To me source available is: we are open source but if you are an cloud provider with billions of dollars, ask us for a license/fund us. Technically linux gets funded enough and rightfully so but I remember how netbsd's fundings were so meagre and low which really saddened me. To be honest, I thought about it and lets assume Linux uses a busl like license which open sources after 4 years Most likely what would've happened is that someone will take that 4 year old code and then fork it to create the linux we all kinda love. But overall I think linux is the bedrock of any vps/cloud provider which can be small enough too to be unable to buy their source available license so its kind of an mixed bag I guess and for linux, not worth it because it already gets a lot of funding. It would be interesting if the same funding that linux kernel gets was shared at a similar level to the distros because I saw cachyos and talked to its creator on discord and I am not kidding but the fundings are very small for a project so big. Also I think most people use source available license to make money or funding, basically the question which I want to ask you is: how to make enough money in open source? |
|
|
| ▲ | jrowen 5 hours ago | parent | prev | next [-] |
| What principles and values of the open source movement are protected by staunchly refusing to allow "source available" to call itself open source? To an outsider it looks like counterproductive bickering between people on the same team. |
| |
| ▲ | quadrifoliate 5 hours ago | parent | next [-] | | > What principles and values of the open source movement are protected by staunchly refusing to allow "source available" to call itself open source? The part where the license says "Don't run this on your server and charge people money for it, or we will sue you"? I know that everyone thinks of Big Tech absorbing your project into their SaaS when they do this, but there are other ways (say AGPL) to combat that. O'SaaSy seems to me to be essentially a "give us your code for free, and you can self host it, but don't dare to charge $$ for it or else!" license. Now you're bringing lawyers into the picture for anyone who's hosting your software on their servers. It's very reasonable for a SaaS company that wants to defend its moat, but it's not Open Source. (Talking of, I'm actually curious if anyone has seen actual self-hosted Fizzy instances in the wild.) | | |
| ▲ | jrowen 4 hours ago | parent | next [-] | | I didn't ask which part of the license violates OSS values, I asked what those principles and values are. I will infer that "anybody can do whatever they want with the code" is the principle you are referring to. I kind of thought that it was more about stuff like sharing and personal development and edification and the ability to see inside and understand things. But let's get really divisive over the money stuff. | | |
| ▲ | simonw 4 hours ago | parent | next [-] | | It's about unambiguously understanding exactly what my rights are and how I can use that code. In the case of the janky new 37signals license: what exactly counts as "... where the primary value of the service is the functionality of the Software itself"? Who gets to define the "primary value" of the thing I built? | | |
| ▲ | jrowen 4 hours ago | parent [-] | | So would you say that (in your opinion) a source available license could in theory call itself open source, if it used language you found to be unambiguous about your rights? Or is that not possible? | | |
| ▲ | simonw 3 hours ago | parent [-] | | If it calls itself "open source"
and I go to https://opensource.org/licenses and can't find an approved copy of the license - or I can't ask my favourite open source expert lawyer for their advice on it - then I don't want it to call itself open source. | | |
|
| |
| ▲ | quadrifoliate 4 hours ago | parent | prev [-] | | I apologize for having missed the mark with your question. > I will infer that "anybody can do whatever they want with this code, OR ELSE YOU'RE NOT WORTHY" is the principle you are referring to. I feel like there's cynicism in your phrasing, but a perhaps more neutral phrasing would be "Don't pick and choose what specific circumstances your users can use this for". | | |
| ▲ | yjftsjthsd-h 3 hours ago | parent | next [-] | | Or, as GNU puts it, > The freedom to run the program as you wish, for any purpose (freedom 0). https://www.gnu.org/philosophy/free-sw.en.html#four-freedoms | |
| ▲ | jrowen 4 hours ago | parent | prev [-] | | There was of course and I edited it out. Why is it important to give "everything" to the users? They have the source code. Why is it so important that they can use it for whatever they want? | | |
| ▲ | danlitt 2 hours ago | parent | next [-] | | Giving the users source code and no rights to do anything with it really doesn't give them very much. Software freedom advocates are not just nerds who really enjoy reading source code. The point is that if you have the source code and the right to change it then you take control of the activity the software is doing, or helping you to do. If you don't have control, being able to read the source code is not very useful. | |
| ▲ | scheeseman486 4 hours ago | parent | prev | next [-] | | Being able to fork a project when management turns hostile is one of the most effective ways GPL software protects itself from enshittification and corporate sabotage. Source available does nothing to prevent this. | |
| ▲ | quadrifoliate 3 hours ago | parent | prev [-] | | > They have the source code. This can also be true, say, of a dump of leaked Windows source code. Would you say that that's Open Source? Why not? What's different between that and Fizzy? Fizzy's creators will also sue you in certain cases. > Why is it so important that they can use it for whatever they want? It's important only in terms of the ethics of calling yourself open. The OSI (and many other commenters here, and me) are saying that open source should be defined by lack of restrictions on the usage; DHH etc. are saying that it should be defined by lack of restrictions on the access. The reasons why I think usage-based definition rather than access-based definitions are more reasonable are: - Providing access to code is relatively cheap/easy today. This wasn't always true in the past. - Usage has a lot more variables than access. If you start putting restrictions on it, anyone using it has to stop and think about their usage to ensure it's not falling afoul of the restrictions. For example, if I put Fizzy on my server and provide free access to it for anyone on the internet without the 1000-item limit, does that qualify as "directly compet[ing] with the original Licensor by offering it to third parties as a hosted Cloud Service"? I would hope not, but if I want to make sure I have to pay a lawyer hundreds of dollars. |
|
|
| |
| ▲ | zx8080 4 hours ago | parent | prev [-] | | > The part where the license says "Don't run this on your server and charge people money for it, or we will sue you"? A bit offtopic but could re-generation of the project with LLM (with for example prompt "rewrite the <repo> changing every line of code") help protecting from being sued? If yes, then the OS licensing is doomed to fail. | | |
| ▲ | mariusor 3 hours ago | parent [-] | | We had a trial about this if I'm not mistaken. For a piece of software to be declared as not infringing on another, its developers need to use a "clean room" approach when developing it. Giving an LLM a repo to copy is definitely not "clean room". |
|
| |
| ▲ | simonw 4 hours ago | parent | prev | next [-] | | If something is open source and follows an OSI approved license I don't have to ask a lawyer to review the license before I integrate with that code. The moment you change a single line of that license I now have to pay extremely close attention to those details again. This isn't a naive idealism thing - there are very solid, boring, selfish reasons for caring about this. | | |
| ▲ | jrowen 4 hours ago | parent [-] | | This is a good technical point. But this seems to kind of argue that one of the principles of open source is that businesses should be able to pull it into their proprietary projects to make money without hesitation. Is that accurate? I thought that was kind of more of a bonus. I feel like it's participating in the spirit of open source and should be welcomed, if someone wants to make their code available but just wants to try and restrict anything-goes usage. But I can see the purity argument. | | |
| ▲ | simonw 3 hours ago | parent [-] | | There are open source licenses that don't allow businesses to use them to make money without hesitation like the AGPL. What matters is clarity. If code is licensed under a known open source license businesses know exactly what they can do with that code. Other users of the code also know that it supports the core criteria outlined in https://opensource.org/osd |
|
| |
| ▲ | ThrowawayR2 4 hours ago | parent | prev | next [-] | | FOSS was founded on The Four Essential Freedoms: https://en.wikipedia.org/wiki/The_Free_Software_Definition#T... that GPL/LGPL were devised to embody. Shared source licenses don't adhere to freedom 0. | |
| ▲ | Ekaros 4 hours ago | parent | prev | next [-] | | I think it comes to analogies, with open source you have a public park you are free to use. With source available it is public park you are free to look at behind a fence... So not actually public park. Still a fine thing to exist. As user as well. Difference between I can use this for free and I have to pay to use this. Even if I can see parts inside is significant. It might not be real principle, but at least it is real difference. | |
| ▲ | koolala 2 hours ago | parent | prev | next [-] | | These terms are designed to trick people exactly like you. "Source available" means you can sue anyone that shares a modification of your code for any reason you want to make up. | | |
| ▲ | eudoxus an hour ago | parent [-] | | I'm going to respond here assuming you are being genuine and not facetious or sarcastic (even though I am hoping you were). "Source available" doesn't in any way mean "you can sue anyone that uses your code for any reason...". The irony of highlighting the trickery of these terms then you yourself perpetuating wrong definitions is... amusing. "Source available" is by definition ill-defined, in the sense that "open source" is defined. There is no trademark, stewarding body, or legal entity behind "Source available". It only exists in relation to OSI defined "open source". Which is to say, it is defined as code that does not fit the "Open Source Definition (OSD)" yet its source code is viewable. Maybe its modifiable, maybe its free to use, but maybe its neither. Thats all anyone can factually attribute to the definition of "Source available". Nothing about "suing ... for any reason". Again, hoping you were making your comment in good fun, otherwise it doesn't look too good for you. | | |
| ▲ | koolala an hour ago | parent [-] | | I edited it to be more specific while you were typing that. The entire point of copyright is a legal mechanism to sue people. "Source-available" at a minimum is someone sharing their code under their own copyright and terms of use. Yes the term is designed to trick outsiders. Most people don't even know that code is copyrighted by default when it is posted publicly and freely on the internet without a © symbol. | | |
| ▲ | eudoxus an hour ago | parent [-] | | All code is shared "under someones own copyright and terms". Whether you use pre-existing words or not doesn't define if its open-source or source-available. I can write a license right now that I maintain the copyright, and written with my own terms that complies with the OSD. We happen to have a collection of existing licenses that have been vetted, but it isn't a exclusionary whitelist. I'll reiterate, "source available" can only be defined as not OSD code that is viewable. Everything else is entirely open to implementation and interpretation. This is the largest problem with the term. This is in stark contract to examples like "Fair Source" which has a legal definition like the OSD, and a entity behind it stewarding that definition [0], while being a subset of Source Available. All fair source is source available, not all source available is fair source. Yet, fair source doesn't fall into your definition of source available. [0] - https://fair.io/ | | |
| ▲ | koolala an hour ago | parent [-] | | Why not both? Why can't something be source available and open source? Or fair source and source available? It isn't this complicated. | | |
| ▲ | eudoxus an hour ago | parent [-] | | Thats a fair (no pun) question! The reason "source available" exists is to starkly seperate it from "open source", yet to your point, they certainly can be both. However it is reductive/pointless to say my code is "open source and source available" since of course the source is available if its open source. This highlights my knee-jerk reaction to your initial post. My original definition I provided for Source Available was "[viewable but not OSD]". This is overly restrictive since can be both, but to assign any meaning at all Source Available it needs to be defined in relation to "Open Source", otherwise its meaningless. I agree, it really isn't complicated :). |
|
|
|
|
| |
| ▲ | sceptic123 an hour ago | parent | prev | next [-] | | Yes, it's a spirit vs. letter argument isn't it? Or _Open Source_ and _open source_. | |
| ▲ | nextaccountic 4 hours ago | parent | prev | next [-] | | > bickering between people on the same team. Uh.. are they? I'm somewhat sympathetic to licenses that will be open source in X years, but the open source ethos is that, with proper attribution, we can do whatever with the code, the only restriction being that for some projects a derivative work needs to also be open source (while others don't care even about that) If we were to welcome non-open source projects into a larger community, we should probably begin with licenses that forbid the usage of the software in military and things like that. Which fails to be open source for the same reason: it puts limits in how you can use the code | |
| ▲ | Supermancho 4 hours ago | parent | prev | next [-] | | Some people have internalized the words "open" "source" to mean more than the words, even going so far as to eschew the benefit (which was at the heart of the Stallman problem) because it doesn't fit the desired ethos and license. It's counterproductive, indeed. | | |
| ▲ | NiloCK 2 hours ago | parent [-] | | People use the term to refer to a proprietary definition from the OSI, which is an OK convention. I just wish they would capitalize it, and leave the normal interpretation of the words also available. |
| |
| ▲ | umanwizard 4 hours ago | parent | prev | next [-] | | They’re not at all on the same team. “Open source” is given away for free, to do what you want with it. Source available is not. Fundamentally they have nothing in common other than the fact that you are allowed to read the source code. | | |
| ▲ | jasonkester 4 hours ago | parent [-] | | Indeed. One is given away for free to do whatever you want with it. The other is given away for free to do whatever you want except to be a dick. If you’re not planning to be a dick, they’re functionally identical. It’s an improvement. | | |
| ▲ | koolala an hour ago | parent [-] | | "Source Available" is "follow whatever my rules are or I will sue you". That could include something as crazy as a license that says "be a dick and I will sue you". For normal people that can't afford legal fees or lawyers that gives "source available" a big range of abusive possibilities. |
|
| |
| ▲ | ModernMech 4 hours ago | parent | prev [-] | | Not the same team. Open source isn't really about the license, and it's also not even really about the source; open source is a philosophy centering open development and collaboration. Sharing the source is necessary, but not sufficient. Too often, "source available" means you get to see the source, but you are not invited to participate in development, and certainly you're not going to be participating in collaboration. "Source available" projects want the benefits of being associated with that egalitarian philosophy because it's popular amongst technologists, who are their initial customers. But they don't want to actually practice the philosophy because their core interest is protecting their IP to turn a profit, not open collaboration and development. Outside contributions are considered a liability in many source available projects [1]. This is important because source available projects have in the past resulted in a "rug pull", when the project gets enough airspeed, so they start putting more work into the closed source to placate their investors. Once the technologists are not the primary users, the entire source available charade is done. The available source becomes deprecated, features are moved to the closed source branch, and eventually the available source rots. One final point: if we call source available "open source", then what are we going to call open source to differentiate it from source available. Because they're actually different things. [1]: For example, many projects won't even allow outside contributions, but when they do, you'll have to sign some sort of contributor agreement: https://www.scylladb.com/open-source-nosql-database/contribu... Edit: (this is to the response below me, as I'm rate limited now and I'm going to bed so I'll forget to post this tomorrow) If anyone tried to do this then the project would be forked immediately. An open source project can go closed source, but as an OSS project, everyone should already have everything the need to keep it going despite that, and that all remains open. That's why we love open source. Also, it'd be really hard to pull off if they've accepted a lot of outside contributions -- when you submit code to an open source project, you retain the copyright. This is not a problem as long as the project is licensed under the agreement under which they submitted the commit, which only grants rights to redistribute under that license. At least that's how it works with Apache 2.0 (I believe, IANAL). So to go closed source, they'd need agreements from all of their contributors to do so. Now, it can happen. MongoDB is an example. But as far as I can tell, you'd have a hard time of it if you accepted contributions from people and they. | | |
| ▲ | jraph 3 hours ago | parent | next [-] | | > Open source isn't really about the license, and it's also not even really about the source; open source is a philosophy centering open development and collaboration. Not really. A project under an open source license which doesn't accept contributions is still open source. It is totally about the license and the source code availability. There are interesting things to say about the various development models, and those common in the open source world, but the open source aspect and the development model aspect should not be mixed. | |
| ▲ | jrowen 3 hours ago | parent | prev [-] | | Haven't open source projects done the rug pull too? Can't they relicense new code going forward? I guess I would have thought of source available as existing under the open source umbrella. I get that there is an important distinction but from an adoption and evangelism standpoint it seems like an unnecessary crusade to push them away. Do those projects have a strong track record of behaving badly? Do you think DHH has those types of intentions? (I don't know much about him really) | | |
| ▲ | jraph 3 hours ago | parent [-] | | > Haven't open source projects done the rug pull too? Can't they relicense new code going forward? They can, if the original license is permissive, or if there was a CLA. They can't for significant contributions under a copyleft license that was not done under a CLA. Something to consider when contributing to a project that uses a CLA or a permissive license. > I get that there is an important distinction but from an adoption and evangelism standpoint it seems like an unnecessary crusade to push them away. Depends on your goals. If source available misses the point anyway, adoption doesn't help, the message risks being blurred, and therefore you should push back. |
|
|
|
|
| ▲ | zokier an hour ago | parent | prev | next [-] |
| I think the proper litmus test for these newfangled source available licenses is if the company is willing to operate under the terms of the license, or are they carving out special position for themselves as the copyright holder. In almost all cases I've seen it is more of the latter, and I find that pretty telling. |
|
| ▲ | NiloCK an hour ago | parent | prev | next [-] |
| Again and forever: These fights stem from usage of a proprietary definition of Open Source (the OSI's). Obviously the definition doesn't resonate with DHH, and he uses the words 'open' and 'source' colloquially. Open, as in a book or a window, source, as in the thing that gets compiled into bits and bobs that run on computers. You wouldn't jump on someone's "open letter" to city hall because of a lack of freedom to fork it. This could stop if people capitalized their reference to Open Source, which is standard English treatment of proper nouns. Unlikely to happen though, because insisting that "my definitions are your definitions" seems to be a primal tribal instinct for humans. |
| |
| ▲ | douglascamata 7 minutes ago | parent [-] | | Pretty much the most sound comment in this section. It's like some organization "stole" the meaning of the words "open source" and called it "Open Source" (with the capitalization). Now you can't say your source is open for anyone to read anymore because it's not "Open Source"™ as "That Entity"™ defines it. |
|
|
| ▲ | tzahifadida 4 hours ago | parent | prev | next [-] |
| I think that people looks at n8n success and say why not use source available?... However, I believe they are wrong to believe that this would work for any project... |
|
| ▲ | theanonymousone 3 hours ago | parent | prev | next [-] |
| As a lay person, I still don't get what is AGPL missing that makes vendors "invent" so many new licenses and spawn so much debate? Why not just use AGPL, and if it's insufficient, invest in an AGPLv2 initiative? |
| |
| ▲ | kemitchell 2 hours ago | parent | next [-] | | See https://writing.kemitchell.com/2018/11/04/Copyleft-Bust-Up#b... MongoDB invested sufficient resources in drafting an update to the AGPL. That license is called the Server Side Public License. Controversy ensued. | | |
| ▲ | RobotToaster an hour ago | parent | next [-] | | Iirc the issue with SSPL was that releasing the entire stack under SSPL would basically be impossible, since you wouldn't have the rights to release, for example, the Linux kernel, under it. | | |
| ▲ | theanonymousone 40 minutes ago | parent [-] | | Yes. I also read it somewhere that, for example, if you hosted your service on Microsoft IIS, SSPL required you to publish IIS source, regardless of the fact that you don't have it. |
| |
| ▲ | theanonymousone 2 hours ago | parent | prev [-] | | But SSPL was not approved by OSI. BY "investing" I mean getting it to the same status as AGPL :) | | |
| ▲ | A1kmm an hour ago | parent | next [-] | | If the intent is to stop it being used for a business, that's inherently at odds with part of the OSI's definition: "The license must not restrict anyone from making use of the program in a specific field of endeavor. For example, it may not restrict the program from being used in a business, or from being used for genetic research". Now technically maybe it could meet the OSD if it required a royalty for hosting the software as a SaaS product, instead of banning that - since it allows "free redistribution", and passes on the same right to anyone receiving it (it is defined in terms of prohibitions on what the licence can restrict, and there is no restriction on charging a set amount for use unless that requires executing a separate licence agreement). Now arguably this is a deficiency in the OSD. But I imagine if you tried to exploit that, they might just update the definition and/or decline to list your licence. | |
| ▲ | vanviegen 2 hours ago | parent | prev [-] | | Are you suggesting that they should've bribed OSI, or.. ? | | |
| ▲ | theanonymousone 41 minutes ago | parent [-] | | /s would be nice. But just in case, I was suggesting to work closely with OSI and do enough back and forth until a license is agreed upon. |
|
|
| |
| ▲ | createaccount99 3 hours ago | parent | prev | next [-] | | MinIO made their source AGPL, but then cloud providers hosted the service "as is" and make money off it, with MinIO team getting zip. That still complies with AGPL but is not monetarily beneficial to the MinIO team. At least that's my understanding. They closed source completely, but a source-available license wouldn't have run into this issue. | |
| ▲ | asiekierka 3 hours ago | parent | prev | next [-] | | It is not possible to create a license that would satisfy the Free Software Foundation's "four freedoms" while also solving the issues many of those vendors have with the AGPL. At the same time, the "source available" mindset doesn't have a steward organization like the FSF or OSI. | |
| ▲ | maxloh 3 hours ago | parent | prev | next [-] | | The major concern regarding the AGPL is that it only fosters code share when a code change is involved. The license has nothing to do with someone building a competitive service around your project. If a Big Tech company happened to build a cloud service (SaaS) around your project without any code change, and that service is more competitive than the one you provide, there is not much you can do about it with the AGPL. The AGPL is published by the FSF, with mainly community-led projects in mind. The profit and sustainability of a corporation is not their primary concern. (A minor correction: The most recent version is v3; any newer version would be v4, not v2.) | |
| ▲ | koolala 3 hours ago | parent | prev [-] | | Source available isn't a license, it is the lack of a license. It's the legal default state for all art. It can include whatever made-up rules the author wants you to follow but your just as well off if you don't read them and just treat it as copyrighted. |
|
|
| ▲ | immibis 17 minutes ago | parent | prev | next [-] |
| Also, "open source" is not free software. |
|
| ▲ | anon-3988 2 hours ago | parent | prev | next [-] |
| Why haven't anyone randomly generate a bunch of code of various kinds, use LLM to create some summary of it and dump them to github with a restrictive license? The patent office isn't here to enforce anything. |
| |
| ▲ | narcraft 33 minutes ago | parent | next [-] | | It'd be like copyright trolling the Library of Babel. The set of useful programs would be totally eclipsed by incoherent gibberish (even if there were a means to ensure that the randomly generated code were syntactically correct). In other words, the signal to noise ratio would be microscopic and running this scheme in finite time would effectively result in zero valuable code being successfully squatted. | |
| ▲ | bloppe an hour ago | parent | prev [-] | | I'm curious as to where this is going. What happens next? |
|
|
| ▲ | xyzzy_plugh 5 hours ago | parent | prev | next [-] |
| O'Sassy or whatever is certainly Source available, and not Open Source. DHH can pound sand. I used to think the pedantry was foolish, but I've grown to understand the distinction. It's one thing to criticize the OSI's claim to the term, and I do think they could do a better job at getting out ahead of new licenses and whatnot, but even if you ignore OSI entirely then the distinction is of substantial value. I do think we need more Source Available licenses in the world. Certainly I would greatly appreciate being able to browse the source of the many proprietary software systems I've administered over the years. At the same time it is not worth it if the spirit of Open Source is watered down. |
| |
| ▲ | JoshTriplett 5 hours ago | parent | next [-] | | > I do think we need more Source Available licenses in the world. Certainly I would greatly appreciate being able to browse the source of the many proprietary software systems I've administered over the years. Yeah. Releasing a project under a source-available proprietary license and calling it Open Source, or doing a rugpull and changing an established Open Source license to a source-available proprietary license, is the kind of thing that causes the most grief. If you release something under a source-available proprietary license and make no pretenses about it being something else, and the alternative was not releasing it at all, it's a (slight) improvement. | |
| ▲ | sofixa 4 hours ago | parent | prev [-] | | > I do think we need more Source Available licenses in the world. Certainly I would greatly appreciate being able to browse the source of the many proprietary software systems I've administered over the years. I think we need more differentiation and different terms. Because O'Sassy / FSL / whatever that just forbids other companies from selling the same software as a Service is quite different than just the source being available with no rights at all, or with restrictions on who can use it and when (size of company, for profit or not, production, etc). |
|
|
| ▲ | jbstack an hour ago | parent | prev | next [-] |
| Misleading article. From the second paragraph: > David Heinemeier Hansson (also known as DHH) released a new kanban tool, Fizzy, this week and called it open source. From the linked article by DHH: > That means it's not technically Open Source™ |
| |
| ▲ | debugnik an hour ago | parent [-] | | He calls it open source in the title and the following paragraph to that. That sentence only means he thinks of himself as cheeky. |
|
|
| ▲ | wvenable 5 hours ago | parent | prev | next [-] |
| > DHH's choice of license reacts to a real pressure in open source: many companies make real money from open source software while leaving the hard work of building and maintaining it to others. If you don't want start a business and make real money from your software then denying that to others is antithetical to the concept of open source and free software. That being said; I have no issue with a developer choosing any license they want -- it's their software and therefore it's their right. But calling it "open source" when it specifically forbids certain use-cases is just wrong. DHH wants his cake (pretend it's real OSS) and eat it too (deny usages). |
| |
| ▲ | sofixa 4 hours ago | parent [-] | | > If you don't want start a business and make real money from your software then denying that to others is antithetical to the concept of open source and free software. What if you do and have done so, yet you're competing with e.g. AWS, GCP, Azure, who can do it for cheaper than you due to scale, and also have a much easier time to sell an extra line item to their existing customers vs you having to go through commercial negotiations and purchase agreements? Cf. Elastic, Redis, etc. | | |
| ▲ | wvenable 3 hours ago | parent [-] | | If you have a problem with that then don't make it open source. And if you don't make it open source, don't call it open source. My own personal position is that my commercial software is commercial for me and my open source software is free for everyone to use for any purpose including making money that I will never see. If I cared, I wouldn't make that software open source. | | |
| ▲ | jraph 3 hours ago | parent [-] | | It should be pointed out that commercial and free software / open source are not opposed though. |
|
|
|
|
| ▲ | cess11 4 hours ago | parent | prev | next [-] |
| I don't know, I kind of have trouble being enthusiastic about a caustic far right activist falling out with some other person over nuances in non-free software licensing. |
|
| ▲ | modzu 4 hours ago | parent | prev | next [-] |
| we need more source available, not less. im not the only one sick of the osi thought police. im fine with still calling it open. ya know what else, free as in speech is great. but so is free as in beer. |
|
| ▲ | kemitchell 3 hours ago | parent | prev | next [-] |
| Watching what we charitably call this debate flare up yet again gives me an odd mix of feelings. On the one hand, seeing people I've read and listened to for years heave time, attention, and more typing onto this tire fire evokes deep tragedy. On the other hand, I've been there, casting my own vanities to the bonfire, more than a few times. There's comfort in the familiar heat and glow. I couldn't escape the waste until I was willing to give up the idea of myself as experienced, as an expert. Until I accepted that time served taught me lessons, but didn't bestow authority. Most people coming into this are new. They relearn what's useful and leave the rest behind. That's part of adaptation. I try to see their point of view. If you ask a newer coder what "open source" means, they might say "like MIT?" or even just "like GitHub?" If you look "open" up in a good thesaurus, "available" is there. The Initiative---really, whoever's on the board now or later---will never own or effectively police the term "open source", much less "open source AI". And nobody claiming "open source" for good or ill will ever summon on themself the kind of attention or cachet that marketing bauble once commanded, no matter what their license says. As for fellow oldheads, there's no resolving contradictions between ways we learned to frame these issues, decades ago. Can changes to a license be a solution to the funding problem? Can using freedom terms to buttress a business count as truly open? That bizarre conflict of ontologies won't decide where programming goes in the future, if it ever did. I doubt it will even be won or lost. It will just fade away, like the circumstances that started it. DHH can kick the anthill. The activists can raise their old hue and cry. It's purely elective, demoded dramatics. The real problems of software politics today aren't expressible in either schema. They can even seem tautologically unsolvable. Meanwhile, we've got new aspirational generalities that aren't expressible in the old ways of speaking. "Sustainability", because many doing good aren't doing so well. "Decentralization", because we're all sharecropping on some platform now. Sometimes I think the best I can do for the younger generations facing today is just to never impose petty trivia about "the movement" ever again. Never deign imply I know what they should consider important. If "free" and "open" meant something to me, let their inheritors tell me what they mean now, in practice. Tell me about the world they built and left for them. Maybe I don't have to choose. After all, who reads blogs? |
| |
| ▲ | quadrifoliate 3 hours ago | parent | next [-] | | > After all, who reads blogs? I used to read yours, anyway! If the literal lawyer who specializes in licenses doesn't have a clear point of view on this, what hope do the rest of us have? | | |
| ▲ | kemitchell 3 hours ago | parent [-] | | My point of view is clear, but what I see is complex. Things seemed simpler back when I believed what Slashdot told me, before I'd spent twenty years getting involved and looking closer. If you're looking for a seer with a salvation plan---as technology, legal innovation, organizational form---I don't have hope to offer you. Look at the figureheads of free and open, the "philosophers". The ones we remember succeeded, but not on the terms of the lofty gospels they preached. Very few practical systems are "free". Most competitive software is closed, and sharing code across orgs still sucks much of the time. Linus succeeded, but Linus just wanted to code, get respect, and make good money. Glad he did. Thinking we'd seen the end of software history got us here. Now I see more willingness to try new things again. They mostly wither or fail, but so did most early attempts at "free". Mutation, selection, adaptation. |
| |
| ▲ | jrowen 3 hours ago | parent | prev [-] | | Now it all makes sense, thank you. |
|
|
| ▲ | phendrenad2 5 hours ago | parent | prev | next [-] |
| > Look, the term "open source" has a specific, shared meaning No, YOU look. The term "open source", being made from two common words with actual specific, shared meanings, unfortunately together create a common-sense meaning that is NOT the "specific, shared" meaning that the Open Source Initiative defines it as. So, we'll spin and spin, stuck in this endless debate. And no amount of beating people over the head (except, maybe if you can find a way to reach through the computer and do it physically) will change that. |
| |
| ▲ | koolala 2 hours ago | parent | next [-] | | Control language and you control people's expectations. Like the shift from 'Private Message' to 'Direct message'. 'Open Source' to 'Source Available' would be just as massive of a shift in control and power. | |
| ▲ | createaccount99 2 hours ago | parent | prev [-] | | I agree with this. The new definition of "open source" has been crafted out of malice. _Anyone_ new to programming runs into this confusion, and that's evidence in itself. |
|
|
| ▲ | RossBencina 5 hours ago | parent | prev [-] |
| Interesting. The post is about whether a license prohibiting SaaS competitors is "open source" and whether it might work out as a good way to ensure project sustainability. In this context "source available" means that you have the source code but you can't use it to compete with the project owner. [Kinda puts Omarchy in a different light don't you think?] There is another, I think different, form of "source available" that I've seen a bit lately, similarly from corporate/commercial sponsors: the source code is released under an OSI approved license (e.g. BSD, GPL licence) and the owner maintains and develops the code in an ongoing fashion, but there is no way to easily interface with the developers, contribute changes back to the project, nor is there any public facing bug tracker or developer/user community. To me this is just as much "not open source" as a specific no-compete with the primary project sponsor. |
| |
| ▲ | lmm 5 hours ago | parent | next [-] | | > There is another, I think different, form of "source available" that I've seen a bit lately, similarly from corporate/commercial sponsors: the source code is released under an OSI approved license (e.g. BSD, GPL licence) and the owner maintains and develops the code in an ongoing fashion, but there is no way to easily interface with the developers, contribute changes back to the project, nor is there any public facing bug tracker or developer/user community. To me this is just as much "not open source" as a specific no-compete with the primary project sponsor. No, that's very much open source - in fact, it was the way most big name open source projects were developed back in the early days. See the famous "the cathedral and the bazaar" essay. Public bug trackers and widely soliciting contributions to mainline are relatively new phenomena, but you always had the right to fork and maintain and share your own fork, and that's the part that's essential. | | |
| ▲ | RossBencina an hour ago | parent [-] | | I agree that it started that way, but that does not mean norms and expectations don't shift. To me, acting like it's 1980 is weird. The majority of maintained open source projects today are single-source-of-truth projects, not source code drops from unreachable invisible teams. There is a reason for that -- it's part of what makes the projects usable and dependable. |
| |
| ▲ | cortesoft 4 hours ago | parent | prev | next [-] | | How easy do you have to make it to contribute to be considered “open source”. Obviously, no project accepts every single pull request. Where is the line between “open source” and “no open source” in your definition? | | |
| ▲ | RossBencina an hour ago | parent | next [-] | | The line is where I find and fix a bug and upstream is behind a curtain. | |
| ▲ | ModernMech 3 hours ago | parent | prev [-] | | Intent. Do you intent to be a genuinely open community and is it set up around fostering that dynamic as a central aspect of development? It's hard to measure intent, but we can do so indirectly by looking at the project structure: - Are there contributor guidelines? - Do contributors have to sign a waiver before they can contribute any code? - Is there a RFC process? - Does the project actually respond meaningfully to that feedback, or does it simply get filed in the special complaints folder for corporate. - Does the project encourage outside contributions in more than a cursory way? - Does the CLA grant the company unilateral relicensing rights? - Are governance documents public? - Can the community vote on decisions? - Does the community have a say in how it's moderated? - Are community members invited to actually join the organization? - Are architectural decisions made in open meetings? - Is there a public ROADMAP and is the community invited to contribute to it or influence it? - Can others build competing distributions without fear of retaliation? - Can the project be forked if there is community disagreement about direction? Those are just some signals off the top of my head. There's no bright line; the presence or absence of a few won't say anything one way or another. But if many of the answers to those questions are leaning toward the negative, then I don't think it can be open source. | | |
| ▲ | wvenable 3 hours ago | parent | next [-] | | Some of my favorite open source software is random stuff that the author just completely abandoned but had the forethought to make open source so that others could still use it, fix bugs, add features, and even fork it. RMS just wanted to be able to fix his printer driver. | |
| ▲ | nevon 3 hours ago | parent | prev [-] | | Completely disagree. To me, and the OSI, none of those things other than redistribution and forking have anything to do with being open source or not. In fact, you could have a closed source project tick nearly all of those boxes, although that would indeed be very unusual. I'm not sure if there is a term for what you are describing. Perhaps "community driven project". |
|
| |
| ▲ | quadrifoliate 5 hours ago | parent | prev | next [-] | | > To me this is just as much "not open source" as a specific no-compete with the primary project sponsor. I feel like this is a completely different conversation, but this is just as much a misunderstanding of what open source is as DHH's. As long as the code is under BSD or GPL, you are free to take it as-is and do what you want with it. You could run your commercial service using it. You can certainly write patches and apply them to your own servers. You could even email the maintainers with them -- worst case is that they will ignore the emails! Open Source does not guarantee that your contributions will be accepted or merged back to the project -- indeed, if you think about it, that would be absurd. I might want some random thing in the Linux kernel, but the maintainers will always have the final word on whether they want my patches or not. The O'SaaSy license says that (essentially) 37Signals will sue you if you try to host this on your own servers, and try to sell it as a service. That's totally different, and a legal rather than a technical hurdle. | |
| ▲ | umanwizard 4 hours ago | parent | prev [-] | | > To me this is just as much "not open source" as a specific no-compete with the primary project sponsor. It’s massively different from source-available in that anyone can fork it for free and start developing it themselves however they want. Just because one fork of the project (the original one) follows a closed development model doesn’t change anything about the code, what you can do with it, and how others can develop it. |
|