3 ms·
$5k also doesn't sound like a whole lot of money to give a guarantee about the security of your FOSS code. Unless I were already rather confident about it, it w
by Delk 4y ago
$5k also doesn't sound like a whole lot of money to give a guarantee about the security of your FOSS code. Unless I were already rather confident about it, it would take work for me to convince myself about it to the extent that I would be willing to answer a hundred questions on someone else's form. $5k isn't necessarily that much of a compensation for that kind of work, unless you're also gaining something from the work itself (e.g. from reviewing the security of your code for its own sake).
I don't know if filling and returning these kinds of forms can have any kinds of legal implications, but if it did, even potentially, there's no way I'd do that for $5k unless I were in absolutely dire need of that money.
- m3047 4y agoI'm not the person who said "$5K". But it's not about the money per se. Mooting a number is the polite way to say you're open minded to assisting them. Maybe they'll share a third party audit of your code with you. Maybe the written agreement reiterates "you agree to be bound by the license terms and FULLY UNDERSTAND AND ACCEPT ALL LIABILITY" and you still get $5K. Besides at the negotiation stage it's still plus costs. It's been a decade, but if you spend $20K on lawyers and liability insurance and they pay you $25K, you still make $5K.