TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Code licensed under the AGPL must not be used at Google

61 pointsby assttoasstmgrabout 3 years ago

18 comments

heavyset_goabout 3 years ago
Good, I license much of my open source software under the AGPL because of how easily bad actors are able to scare themselves with FUD about the license. I want companies who don&#x27;t understand the licens to be afraid of simply taking without giving back.<p>That said, most of fear around the AGPL is nonsense, and there are plenty of companies and contributors who understand the license and adhere to the terms AGPL software ships under. If Google wants to limit their options, while smaller competitors get a leg up by understanding and using their AGPL options, that&#x27;s good for the market.
评论 #31176820 未加载
评论 #31187902 未加载
hardwaresoftonabout 3 years ago
Welp this is a bit of a chip in my near-term analysis of the situation[0], but I still think the future of F&#x2F;OSS is AGPL.<p>Also since I&#x27;m bit biased I think that there&#x27;s an entire group of people who see this as a welcome to build their next google-beating startup attempt on AGPL since they know Google won&#x27;t touch it (not that google was the undifferentiated-hoster type anyway).<p>[0]: <a href="https:&#x2F;&#x2F;vadosware.io&#x2F;post&#x2F;the-future-of-free-and-open-source-is-agpl&#x2F;" rel="nofollow">https:&#x2F;&#x2F;vadosware.io&#x2F;post&#x2F;the-future-of-free-and-open-source...</a>
评论 #31176699 未加载
评论 #31176496 未加载
franciscopabout 3 years ago
I&#x27;ve made <i>two</i> npm utilities to check for licenses like this:<p>`npx check-licenses`: lean library, requires npm+package-lock.json<p>`npx legally`: checks the filesystem under node_modules, might overfetch license files that are unused<p>Example output:<p><pre><code> ┌────────────────────────────────────────────────────────────────────────┐ │ │ │ Licenses (1326) │ │ │ ├──────────────────────────────────────────┬──────────────┬──────────────┤ │ License │ Number │ % │ ├──────────────────────────────────────────┼──────────────┼──────────────┤ │ MIT │ 1069 │ 80 │ │ ISC │ 65 │ 4 │ │ BSD 2 Clause │ 44 │ 3 │ │ CC0 │ 40 │ 3 │ │ Apache 2.0 │ 37 │ 2 │ │ BSD 3 Clause │ 36 │ 2 │ │ W3C │ 19 │ 1 │ │ Unlicense │ 3 │ 0 │ │ 0BSD │ 2 │ 0 │ │ GPL 2.0 │ 2 │ 0 │ │ AFL 2.1 │ 1 │ 0 │ │ CC BY 4.0 │ 1 │ 0 │ │ CC-BY │ 1 │ 0 │ │ MPL 1.1 │ 1 │ 0 │ │ MPL 2.0 │ 1 │ 0 │ │ ODC By 1.0 │ 1 │ 0 │ │ Python 2.0 │ 1 │ 0 │ │ Ruby │ 1 │ 0 │ │ WTFPL │ 1 │ 0 │ └──────────────────────────────────────────┴──────────────┴──────────────┘</code></pre>
评论 #31176544 未加载
prvcabout 3 years ago
This is, at least, an improvement compared to orgs which just use the code anyway in violation of its license.
todd3834about 3 years ago
When I was at Apple they were very cautious about this too. It wasn&#x27;t banned but it was definitely something you had to get approval for.
评论 #31178213 未加载
laserbeamabout 3 years ago
&quot;This is triggered if the product or service can be accessed over a remote network interface, so it does not even require that the product or service is actually distributed.&quot;<p>Huh? Does that mean that if you do an HTTP request to an AGPL server, your client code must be AGPL compliant? That does not make sense...
评论 #31176414 未加载
评论 #31176412 未加载
评论 #31176417 未加载
hdjjhhvvhgaabout 3 years ago
The world &quot;viral&quot; immediately made me think about the Microsoft era[0]:<p>In 2001 Microsoft vice-president Craig Mundie remarked &quot;This viral aspect of the GPL poses a threat to the intellectual property of any organization making use of it.&quot;<p>[0] <a href="https:&#x2F;&#x2F;www.nytimes.com&#x2F;2001&#x2F;05&#x2F;03&#x2F;business&#x2F;technology-microsoft-is-set-to-be-top-foe-of-free-code.html" rel="nofollow">https:&#x2F;&#x2F;www.nytimes.com&#x2F;2001&#x2F;05&#x2F;03&#x2F;business&#x2F;technology-micro...</a><p>The title of this NYT piece is &quot;Microsoft Is Set To Be Top Foe Of Free Code.&quot; It&#x27;s a peculiar feeling for all of us who saw the birth of Google and actually felt this particular company is very different from others - and especially from Microsoft.
ternaryoperatorabout 3 years ago
This post lacks historical context.<p>Google is the company that initiated the whole movement against the GPL and the AGPL. I was in touch with their OSS guru, Chris diBona at the time. Also, Bruno Lowagie&#x27;s book &quot;Entreprenerd&quot; gives some more details about this initiative.<p>In short, Google were caught in violation of the GPL&#x27;s copyleft terms and decided that they could not be caught in violation again on any of their principal technologies. So they started a very public campaign to strip the GPL from the company and because they are so reliant on OSS, to dissuade OSS developers from using the GPL (and by extension the AGPL). At the time, the GPL was, depending on survey the #1 or #2 license in OSS.<p>However, contrary to their public position, Google still uses GPL products <i>widely</i> inside the company. Linux and Java, for example, are both licensed under the GPL and used extensively at Google. And the parts of Android that are based on Linux are licensed under the GPL [0].<p>Note that all major companies that sell licenses to their OSS use the GPL or AGPL licenses. This is because the copyleft provision provides OSS developers with leverage (&quot;Either open-source your app if you use our product for free or buy a license.&quot;) This is what Google does not want to do. None of the more permissive licenses give developers this leverage: under MIT, Apache, and the other licenses, the developer gives up the GPL&#x27;s copyleft leverage.<p>Some companies have followed Google&#x27;s lead and used scanning tools to eliminate GPL&#x2F;AGPL code from their codebases. This is in part due to the copyleft provision and also to the so-called &quot;viral clause&quot; (if any part of the software is GPL&#x2F;AGPL, the rest of the software it&#x27;s part of must also be GPL&#x2F;AGPL). This makes a lot of sense.<p>However, for developers of <i>stand-alone tools</i>, the GPL is a good option and much less disfavored in corporate contexts (as evidenced by the widespread use of Linux, Java, MySQL, etc. in corporations) and the GPL license provides OSS developers a possible monetary stream from companies that want to modify the tool without disclosing the source code.<p>Personal note: all of my OSS projects are released under permissive, non-GPL licenses because I&#x27;m not looking to make a business out of them and I want the widest possible distribution. Here, I simply want to provide context to the OP and clarify that it should be seen in the context of a long campaign by Google to dissuade OSS developers from the GPL&#x2F;AGPL and to point out that those licenses have benefits for projects looking to pursue a business model based on licensing.<p>[0] <a href="https:&#x2F;&#x2F;source.android.com&#x2F;setup&#x2F;start&#x2F;licenses" rel="nofollow">https:&#x2F;&#x2F;source.android.com&#x2F;setup&#x2F;start&#x2F;licenses</a>
评论 #31177705 未加载
评论 #31178842 未加载
评论 #31176837 未加载
fmajidabout 3 years ago
Use of AGPL is generally considered a big red flag when a startup is undergoing due diligence to be acquired.
darthrupertabout 3 years ago
Even though companies overreact a bit, isn&#x27;t this a clear signal that AGPL is working as intended?
评论 #31177279 未加载
riffraffabout 3 years ago
Seems reasonable, the restriction on installing AGPL stuff on your devices seems odd (how would that influence publicly deployed services?) but it mentions there&#x27;s an approval process which makes it possible, so... Good enough?
评论 #31176398 未加载
评论 #31176404 未加载
riedelabout 3 years ago
See also <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=23966778" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=23966778</a>
nnxabout 3 years ago
Is there any uptake in AGPL use? Besides perhaps the initial spike near AGPL creation, any popular opensource library using AGPL since?
评论 #31176411 未加载
评论 #31176419 未加载
评论 #31176424 未加载
评论 #31176399 未加载
评论 #31177352 未加载
评论 #31176729 未加载
评论 #31176406 未加载
buildbotabout 3 years ago
I would assume at googles scale that this has to be violated pretty often, how could you possibly police this well?
评论 #31176387 未加载
评论 #31176407 未加载
评论 #31176385 未加载
评论 #31176557 未加载
评论 #31176391 未加载
评论 #31176377 未加载
miraculixxabout 3 years ago
So MongoDB is out
评论 #31176723 未加载
josephcsibleabout 3 years ago
As usual, whenever anyone is against the AGPL, it&#x27;s because they want to commit the exact bad behavior that the AGPL is designed to protect people against.
评论 #31176631 未加载
评论 #31176568 未加载
评论 #31176718 未加载
syshumabout 3 years ago
Google like most tech companies may support &quot;open source&quot; but they do so only in the context of dev tools. This is a real problem for modern open source.<p>Free software it seems is trending away from software products that are open source, instead Open source is being limited to developer tools, libraries and framework.<p>Great for devs. Bad for end users and software in general
chungyabout 3 years ago
I understand that AGPL is an attempt to combat software-as-a-service otherwise hiding open source behind a network interface (and yes I know, the FSF&#x27;s preference against that term).<p>It&#x27;s still rather heavy-handed to a point that I would even avoid using AGPL software even for myself. It goes far beyond what the standard GPL demands and might even violate the freedoms to run a program as I wish, and to redistribute the software as I wish.<p>The standard GPL already puts &quot;restrictions&quot; on the latter, but at least said restrictions only apply if I choose to distribute binaries. In the case of SaaS, I am more comfortable with running a service and making the choice to distribute my source or not. Personally, I probably would publish substantial changes to software regardless, but if the only thing I do is change a line of CSS, I also don&#x27;t think it&#x27;s right to force me to have to set up infrastructure to publish my modified source.
评论 #31176525 未加载
评论 #31176403 未加载
评论 #31176425 未加载
评论 #31177581 未加载
评论 #31177233 未加载
评论 #31176381 未加载