Remix.run Logo
ricardobeat 2 days ago

No success yet, but I recently found BUSL - used by Terraform: https://en.wikipedia.org/wiki/Business_Source_License

It stops companies from building high-revenue products for free, while not being as scary as AGPL/LGPL from the business perspective, and completely unrestricted for everyone else (despite not being technically an open-source license).

xorcist 2 days ago | parent | next [-]

Once you decide on a non-free license, in the FSF sense, in the DFSG sense, and in the open source sense, does the details of the license matter much? You want as many people to pay as possible, and you do not wish for others to compete with you providing this software.

It's pretty much a standard non-free commercial license, which exact wording will matter only to purchasing department of your customers. It will be inconsequential to the broader open source community. Literally thousands of those exist and the specific wording matters very little.

ricardobeat 2 days ago | parent [-]

It doesn’t have to be binary. A license like this allows for 99% of the personal and commercial use that a project will ever see, while giving the author leverage over large corporations - which is the main gripe people have. It is not ideal for libraries or things that would be redistributed, but then you have other options.

xorcist 2 days ago | parent [-]

Some things in life are binary. You either allow people to build new products and businesses on your work or you don't. Would you allow me to extend the product with new features? "It depends" is a form of "no". It is not a position to sustainably work from.

If you frame the licensing space as for either personal or commercial use, perhaps your point of view makes sense, but this is not a useful framing for most people, and it is specifically not something the open source community cares about.

If you wish to keep leverage over others then you do not wish to have them compete with you on the same product. That is a valid position to have, but it is squarely on the non-free part of the licensing spectrum. You don't want to play within the open source community and they don't want to play with you. All anyone owe others is to make that clear.

Pannoniae 2 days ago | parent | next [-]

This is why open source is rapidly becoming obsolete ;) There have been source-available/fair source/whatever-you-name-it approaches before.

They were attacked by OSI zealots every time because it's not real open source. Which is true, but the unsaid - or well, only sometimes mentioned - other half is that these open source enthusiasts would you rather have a bog standard all-rights-reserved commercial licence than a relatively open licence without the four freedoms!

I can't claim to read other people's thoughts, but my hunch is that this happens because it's too "close" to an open source licence so they view it as competition, while they view commercial software as either a straightforward enemy or they don't care about it whatsoever.

The history aside, this approach just makes the open source community more and more irrelevant each day, especially with the advent of "vibecode your own dependencies up". The 4 freedoms come from a place where they were about users, but gigantic corporations have shoehorned themselves into being users, and instead of the community defending against it, they think the freedom to exploit the maintainers' work while contributing nothing back is more important than keeping the commons free and shared. :P

Only siths think in absolutes.

rpdillon 2 days ago | parent [-]

The freedom to host open-source software is more important than contributing back to the original project: it's where the actual value of open source comes from. Would you host your website behind Apache or Nginx if you couldn't just switch providers and keep the same web server? Would you ever pick up Postgres or MySQL if you couldn't actually pay a company to host that for you, knowing that if they screwed up, you could switch to a provider that did it better?

From a pure engineering reliability perspective, coupling your technology choice to your vendor gives that vendor too much leverage (as we've seen with, for example, VMware).

This isn't about defending the big companies at all. It's about defending the right of hosting providers to compete on hosting a variety of software. In the alternative world of entirely commercial licenses, or entirely BUSL-styled licenses, you would be shackled to the specific vendors that happened to create the technology that you wanted to leverage. This is a scenario where the customer invariably loses.

ricardobeat 2 days ago | parent | next [-]

> or entirely BUSL-styled licenses

Let's not get everything mixed up here - I singled out BUSL exactly because it does not prevent competing services, especially at small scale. In fact it would encourage small business and individual usage vs big cloud providers. It also has a conversion clause, so worst case scenario you have a slightly outdated MIT-licensed release to pick up from.

The EUPL the author mentions, the AGPL and others are the ones that directly prevent competing services.

That said, indeed it might not be an ideal choice for that kind of cloud-hosted software if you want to maximize adoption.

rpdillon a day ago | parent | next [-]

> The EUPL the author mentions, the AGPL and others are the ones that directly prevent competing services.

To support sibling comment: no it doesn't?

But your point about the revenue cut off in the BUSL is worthwhile (assuming we're talking about a licensor that is leveraging the additional use grant). I just disagree that it's a remedy because it basically punishes a business for being successful, by changing the rules upon which it was built. I'd be very curious to hear of anybody who has licensed software under the BUSL and has ended up getting a license from companies that meet those revenue thresholds.

It's worth noting that the BUSL, by default, with no additional use grant, prohibits the use of the software in production. So I actually think you have the two licenses reversed. The BUSL prohibits production use and competing services by default unless an additional use grant is specified and then it is only allowed under the revenue threshold specified in the additional use grant.

The AGPL has no prohibition whatsoever on the deployment of competing services.

ricardobeat 18 hours ago | parent [-]

It is expected that you use the license with an Additional Use Grant. For example, Hashicorp says:

> You may make production use of the Licensed Work, provided Your use does not include offering the Licensed Work to third parties on a hosted or embedded basis in order to compete with HashiCorp’s paid version(s) of the Licensed Work.

Or, for a revenue threshold:

> You may make production use of the Licensed Work, provided that your use is solely for an application or system developed or operated by an entity (including its affiliates) with total annual gross revenues of less than $10,000,000 USD.

That is the whole point - you can define your own limits for commercial usage, while keeping the rest of the license text unchanged.

The AGPL's "viral" property inhibits competition without prohibiting it - companies are just scared of accidentally becoming liable to publish private software sources. As far as I know, that's the reason it is banned at Google, Apple and other major companies [1].

That didn't stop AWS though, which is why we now have SSPL and the BSL.

[1] https://opensource.google/documentation/reference/using/agpl...

josephcsible 2 days ago | parent | prev [-]

The AGPL doesn't prevent competing services.

bornfreddy 2 days ago | parent | prev [-]

At its core it's a question of control. If I use this library or app, will I be safe? Will I be able to repair it, use it in the future, pay someone to fix it? Will it still be developed in a few years?

FOSS is a great answer to the first few questions, but it fails at the last one. As a user, yes, I would prefer a cloud-protection license, if it means that software will still be developed in a few years time. It's not like I want to use this software to compete with the author, I'm happy not to be allowed to do that.

ghaff 2 days ago | parent [-]

Well, there's no guarantee that there will be sufficient market in a few years for that software development to continue unless you fork it and do so (or pay to have done) yourself.

ricardobeat 2 days ago | parent | prev [-]

Yes, you would be allowed to extend the product. There is no 'it depends', the license is quite short and clear. You have to acquire a commercial license once you go over the revenue threshold, that is all.

I find this much simpler to understand than AGPL/LGPL or the linked EUPL.

mihaelm 2 days ago | parent | prev | next [-]

You might also be interested in the O'Saasy license (https://osaasy.dev/) which is in the similar vein, but simpler.

HashiCorp switched to BUSL license for their products/tools when they already had substantial market share, and they still faced MPL-licensed forks (Terraform -> OpenTofu, Vault -> OpenBao). It will be interesting to see in a few years if those tools notably cut into their share.

I'm not sure a new tool with a BUSL license will get adoption as easily.

ricardobeat 2 days ago | parent [-]

Looks nice. Two main differences:

- BUSL is OSI-approved and listed in SPDX, so corporate lawyers won't be scared away by it: https://spdx.org/licenses/BUSL-1.1.html

- With BUSL the restriction is revenue-based. You can still create competing products, but would have to pay a licensing fee.

xorcist 2 days ago | parent | next [-]

https://en.wikipedia.org/wiki/Business_Source_License:

  Debian FSG compatible No
  FSF approved          No
  OSI approved          No
  GPL compatible        No
  Copyleft              No
ricardobeat 2 days ago | parent [-]

I'm sorry - what I meant to say is that it is listed in the SPDX (https://spdx.org/licenses/BUSL-1.1.html) as a recognized license. The revenue gate means it will never be considered an open-source license by the OSI.

Tomte 2 days ago | parent | prev | next [-]

> BUSL is OSI-approved

Of course it isn‘t.

ghaff 2 days ago | parent [-]

I was a bit surprised to read that there was an OSI-approved license with usage restrictions and wondered if I had missed the memo. But you seem to be correct and it's not OSI-approved and therefore is not generally considered to be an open source license.

mihaelm 2 days ago | parent | prev [-]

Good points, the second is very "dual-licensing" in nature. BUSL is certainly the more "mature" option and there's a higher likelihood people came across it in the wild.

ghaff 2 days ago | parent | prev | next [-]

The heat around this particular issue has cooled down a bit and I'm not sure anyone is especially happy with the state of affairs. But questions around AI have sucked a lot of the oxygen from the room for now.

rpdillon 2 days ago | parent | prev [-]

This framing ignores the fact that many people pick up technologies because they want to be able to switch the vendor that is hosting it for them. If I'm hosting a LAMP stack from some shared hosting provider, it's easy for me to just move to a different hosting provider because all the software is open source and anybody can host it. This falls apart when companies choose the BUSL, which is why it's not considered OSI open source.

2 days ago | parent [-]
[deleted]