3 ms·
Why? Aside from having to click a button saying that you agree to the CLA, how does it affect you in any way? CLAs aren't about making a project more bureaucra
by shadowfacts 10y ago
Why? Aside from having to click a button saying that you agree to the CLA, how does it affect you in any way?
CLAs aren't about making a project more bureaucratic, they're about transferring the rights over the code you're contributing from you to the project, so that there's no dispute over who the code belongs to.
- yetanother1 10y agoI don't like the idea of handing over my contributions to another party under their terms. Either release software under a common open source license (BSD, MIT) or not. Don't add additional terms with some custom license that certainly wouldn't help me.
- edgyswingset 10y agoAnother aspect of a CLA is the ability for a company to cover themselves legally. Say I work at MegaCorp (they make heavy use of Go in some backend systems), and didn't bother making sure I had permission to contribute on MegaCorp time (and thus, contribute MegaCorp IP). I make some PRs to Go which improve the Go garbage collector, which Google happily accepts. These changes help Google and they could help MegaCorp if some of their projects use Go. Hooray! Somewhere down the line, someone at MegaCorp notices that I've been contributing to Go's garbage collector on MegaCorp time without permission. I may or may not be fired. However, Google has now benefited from what is legally MegaCorp IP without the permission of MegaCorp. If this is in the USA, there's a decent chance that MegaCorp tries to sue Google. That's a headache that I'm sure nobody at Google would want to deal with. If there was a CLA which I had to sign, saying that I had permission to contribute MegaCorp IP, Google has a document clearly saying that I had permission to contribute MegaCorp IP. This is a far better situation for Google than if they had no such document.
- paulddraper 10y agoI don't understand. Whether you had the document or not, MegaCorp's lack of permission remains the same. And Google's benefit from your MegaCorp contributions remains the same. MegaCorp legal recourses remain the same. The situation is exactly the same.
- traviscj 10y agoNo, because before Google was guilty of using MegaCorp IP, but now, you're guilty of telling them they could, so you are responsible now, not Google.
- eloff 10y agoI'd like to hear that opinion from a lawyer. While it makes sense, the reality of the law doesn't always make sense.
- paulddraper 10y ago(1) Either way you're guilty. (2) Either way Google competitor has damages on MegaCorp.
- abiox 10y ago> Either release software under a common open source license (BSD, MIT) or not afaik, CLAs and "open source licenses" are different things with different purposes. as such, you can have both a CLA and be BSD.
- yetanother1 10y ago> you can have both a CLA and be BSD Not the case - they can claim it is so, but a BSD license with extra clauses is not a BSD license.
- detaro 10y agoA CLA generally does not add clauses to the license. It generally contains extra rules contributors have to follow to contribute to the "main" codebase, but these are unrelated to the license. If a project has a CLA, you still have the full rights the license grants you, and you can do everything that license allows you to do without signing the CLA. The CLA only governs contributions to upstream, and I'm not aware of any open-source license that says anything about those. As an example, many projects demand copyright assignment through a CLA from contributors, which does not add any restrictions to your use of the project allowed through the BSD license. You still can modify, redistribute, ... the source and products build on it as you wish, the CLA is only relevant if you ask the upstream project to merge some of your changes. The BSD license says nothing about how the upstream project has to accept your proposed changes.