4 ms·
I grow more and more confused about this. Here are some quotes from their terms of use, taken verbatim from https://docs.npmjs.com/policies/open-source-terms ht
by spdustin 11y ago
I grow more and more confused about this. Here are some quotes from their terms of use, taken verbatim from https://docs.npmjs.com/policies/open-source-terms https://docs.npmjs.com/policies/open-source-terms:
Some language was changed recently - the diff for the current version of their open source policy is online [0].
> Nothing in this Agreement gives npm any ownership rights in intellectual property that you share with npm Services, such as your Account information or any Packages you share with npm Services (Your Content).
Makes sense. Your code is your code.
> Your Content belongs to you. You decide whether and how to license it. But at a minimum, you license npm to provide Your Content to users of npm Services when you share Your Content. That special license allows npm to copy, publish, and analyze Your Content, and to share its analyses with others.
This doesn't specify irrevocable, nor clarify how that license could be revoked by the content owner.
> When Your Content is removed from the Website or the Public Registry, whether by you or npm, npm's special license ends when the last copy disappears from npm's backups, caches, and other systems.
This seems deceitful. What exactly does "when the last copy disappears" mean? Seems to me that "perpetual backups" would effectively make their "special license" perpetual. Speaking of "special license", they really need to have an attorney write this up.
> Other licenses, such as open source licenses, may continue after Your Content is removed. Those licenses may give others, or npm itself, the right to share Your Content with npm Services again.
Fair enough, and implies that if my license doesn't give them that right, that unpublishing the code should revoke their "special license".
> Either you or npm may terminate this Agreement at any time with notice to the other...The following provisions survive termination of this Agreement: "Your Content", "Feedback", "Indemnity", "Disclaimers", "Limits on Liability", and "General Terms"
So ... I can terminate the agreement, but that doesn't actually terminate anything?
Don't get me wrong, I feel that npm serves an important function in the community, but as this drama continues to unfold, I find myself trusting them less and less.
[0]: https://github.com/npm/policies/commit/140ed66e2169e248674fe16e920ba9a052c8a337#diff-1c802f7fe1aa289dbc553c49af4801e3 https://github.com/npm/policies/commit/140ed66e2169e248674fe...