SlideShare a Scribd company logo
1 of 14
Not long ago, in a galaxy very close
Someone broke the Internet!
Well, just the Javascript ecosystem
For about two hours
But hey, it was still HUGE!
Azer Koçulu
Open Source developer
working on framework
called Kik
Bob Stratton
Patent Agent
Kik Interactive
What happened next?
1. Azer unpublished all his packages from
NPM.
2. One of his packages, called left-pad, is a
dependency of another more popular
package called line-numbers, which is a
dependency of Babel, React, and
countless others.
3. Without left-pad in NPM, line-numbers and
other packages and builds soon began
breaking (including Kik Interactive).
1. Javascript community quickly tracked the
problem to Azer’s left-pad library and
organized to fix it.
2. NPM had to republish left-pad, under a
different owner from a backup.
3. In about 2 hrs, the problem was solved,
but a deep flaw in the community was
exposed.
Questions arose
1. Did NPM stole Azer’s code when they republished his package?
2. Was NPM’s procedure right?
3. Is there any fault in Azer’s hand, Kik’s hand or even NPM?
The Open Source community
strong foundation are its licenses
TL;DR;
License Review
Apache License v2
You can do what you like with the
software, as long as you include
the required notices. This
permissive license contains a
patent license from the
contributors of the code.
GNU General
Public License v3
You may copy, distribute and
modify the software as long as
you track changes/dates in
source files. Any modifications to
or software including (via
compiler) GPL-licensed code must
also be made available under the
GPL along with build & install
instructions.
GNU Lesser
General Public
License v3
This license is mainly applied to
libraries. You may copy, distribute
and modify the software provided
that modifications are described
and licensed for free under LGPL.
Derivatives works (including
modifications or anything
statically linked to the library) can
only be redistributed under LGPL,
but applications that use the
library don't have to be.
MIT License
A short, permissive software
license. Basically, you can do
whatever you want as long as you
include the original copyright and
license notice in any copy of the
software/source.
BSD-3
The BSD 3-clause license allows
you almost unlimited freedom
with the software so long as you
include the BSD copyright and
license notice in it (found in
Fulltext)
Mozilla Public
License 2.0
MPL is a copyleft license that is
easy to comply with. You must
make the source code for any of
your changes available under
MPL, but you can combine the
MPL software with proprietary
code, as long as you keep the
MPL code in a separate file.
Version 2.0 is compatible with
GPL version 3. You can distribute
binaries under a proprietary
license, as long as you make the
source available under MPL.
What license
Azer used in left-
pad?
Do What the F**k
You Want To
Public License
(WTFPL)
The WTFPL is almost a public
domain grant. It is super-
permissive. Basically, do whatever
you want. Note, however, that it is
not a trademark license.
Questions/Comments?

More Related Content

Similar to TL;DR License Review

WP_Open-Source_Best_pratice_web
WP_Open-Source_Best_pratice_webWP_Open-Source_Best_pratice_web
WP_Open-Source_Best_pratice_web
Paul Plaquette
 
EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...
EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...
EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...
Paris Open Source Summit
 
Os Grossupdated
Os GrossupdatedOs Grossupdated
Os Grossupdated
oscon2007
 
Open Source Business Models
Open Source Business ModelsOpen Source Business Models
Open Source Business Models
Motaz Saad
 
Rolling Your Own Embedded Linux Distribution
Rolling  Your  Own  Embedded  Linux  DistributionRolling  Your  Own  Embedded  Linux  Distribution
Rolling Your Own Embedded Linux Distribution
Emanuele Bonanni
 
Open Source Business Case
Open Source Business CaseOpen Source Business Case
Open Source Business Case
FITT
 

Similar to TL;DR License Review (20)

WP_Open-Source_Best_pratice_web
WP_Open-Source_Best_pratice_webWP_Open-Source_Best_pratice_web
WP_Open-Source_Best_pratice_web
 
Open Source Introduction
Open Source IntroductionOpen Source Introduction
Open Source Introduction
 
EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...
EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...
EOLE / OWF 12 - The affero gp lv3. why it exists and who it's for - bradley m...
 
Open Source: A New Software Paradigm
Open Source: A New Software ParadigmOpen Source: A New Software Paradigm
Open Source: A New Software Paradigm
 
Dependencies and Licenses
Dependencies and LicensesDependencies and Licenses
Dependencies and Licenses
 
RubyMotion Inspect Conference - 2013. (With speaker notes.)
RubyMotion Inspect Conference - 2013. (With speaker notes.)RubyMotion Inspect Conference - 2013. (With speaker notes.)
RubyMotion Inspect Conference - 2013. (With speaker notes.)
 
Linux internals v4
Linux internals v4Linux internals v4
Linux internals v4
 
eBPF — Divulging The Hidden Super Power.pdf
eBPF — Divulging The Hidden Super Power.pdfeBPF — Divulging The Hidden Super Power.pdf
eBPF — Divulging The Hidden Super Power.pdf
 
Os Grossupdated
Os GrossupdatedOs Grossupdated
Os Grossupdated
 
Open Source Business Models
Open Source Business ModelsOpen Source Business Models
Open Source Business Models
 
Using Open Source for Enterprise
Using Open Source for EnterpriseUsing Open Source for Enterprise
Using Open Source for Enterprise
 
Open Source Software Licence Compliance: Art or science?
Open Source Software Licence Compliance: Art or science? Open Source Software Licence Compliance: Art or science?
Open Source Software Licence Compliance: Art or science?
 
Open Source Software Licenses
Open Source Software Licenses Open Source Software Licenses
Open Source Software Licenses
 
eBPF — Divulging The Hidden Super Power.pdf
eBPF — Divulging The Hidden Super Power.pdfeBPF — Divulging The Hidden Super Power.pdf
eBPF — Divulging The Hidden Super Power.pdf
 
Rolling Your Own Embedded Linux Distribution
Rolling  Your  Own  Embedded  Linux  DistributionRolling  Your  Own  Embedded  Linux  Distribution
Rolling Your Own Embedded Linux Distribution
 
Introduction To Open Source Licenses
Introduction To Open Source LicensesIntroduction To Open Source Licenses
Introduction To Open Source Licenses
 
Open Source Business Case
Open Source Business CaseOpen Source Business Case
Open Source Business Case
 
Open Source in the Enterprise: Compliance and Risk Management
Open Source in the Enterprise: Compliance and Risk ManagementOpen Source in the Enterprise: Compliance and Risk Management
Open Source in the Enterprise: Compliance and Risk Management
 
Software license
Software licenseSoftware license
Software license
 
Software license
Software licenseSoftware license
Software license
 

Recently uploaded

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Victor Rentea
 
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Victor Rentea
 

Recently uploaded (20)

DBX First Quarter 2024 Investor Presentation
DBX First Quarter 2024 Investor PresentationDBX First Quarter 2024 Investor Presentation
DBX First Quarter 2024 Investor Presentation
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
 
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...
Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...
Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...
 
DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
DEV meet-up UiPath Document Understanding May 7 2024 AmsterdamDEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
 
AXA XL - Insurer Innovation Award Americas 2024
AXA XL - Insurer Innovation Award Americas 2024AXA XL - Insurer Innovation Award Americas 2024
AXA XL - Insurer Innovation Award Americas 2024
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
 
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWEREMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
 
Cyberprint. Dark Pink Apt Group [EN].pdf
Cyberprint. Dark Pink Apt Group [EN].pdfCyberprint. Dark Pink Apt Group [EN].pdf
Cyberprint. Dark Pink Apt Group [EN].pdf
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with Milvus
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 

TL;DR License Review

  • 1. Not long ago, in a galaxy very close Someone broke the Internet! Well, just the Javascript ecosystem For about two hours But hey, it was still HUGE!
  • 2. Azer Koçulu Open Source developer working on framework called Kik Bob Stratton Patent Agent Kik Interactive
  • 3. What happened next? 1. Azer unpublished all his packages from NPM. 2. One of his packages, called left-pad, is a dependency of another more popular package called line-numbers, which is a dependency of Babel, React, and countless others. 3. Without left-pad in NPM, line-numbers and other packages and builds soon began breaking (including Kik Interactive). 1. Javascript community quickly tracked the problem to Azer’s left-pad library and organized to fix it. 2. NPM had to republish left-pad, under a different owner from a backup. 3. In about 2 hrs, the problem was solved, but a deep flaw in the community was exposed.
  • 4. Questions arose 1. Did NPM stole Azer’s code when they republished his package? 2. Was NPM’s procedure right? 3. Is there any fault in Azer’s hand, Kik’s hand or even NPM? The Open Source community strong foundation are its licenses
  • 6. Apache License v2 You can do what you like with the software, as long as you include the required notices. This permissive license contains a patent license from the contributors of the code.
  • 7. GNU General Public License v3 You may copy, distribute and modify the software as long as you track changes/dates in source files. Any modifications to or software including (via compiler) GPL-licensed code must also be made available under the GPL along with build & install instructions.
  • 8. GNU Lesser General Public License v3 This license is mainly applied to libraries. You may copy, distribute and modify the software provided that modifications are described and licensed for free under LGPL. Derivatives works (including modifications or anything statically linked to the library) can only be redistributed under LGPL, but applications that use the library don't have to be.
  • 9. MIT License A short, permissive software license. Basically, you can do whatever you want as long as you include the original copyright and license notice in any copy of the software/source.
  • 10. BSD-3 The BSD 3-clause license allows you almost unlimited freedom with the software so long as you include the BSD copyright and license notice in it (found in Fulltext)
  • 11. Mozilla Public License 2.0 MPL is a copyleft license that is easy to comply with. You must make the source code for any of your changes available under MPL, but you can combine the MPL software with proprietary code, as long as you keep the MPL code in a separate file. Version 2.0 is compatible with GPL version 3. You can distribute binaries under a proprietary license, as long as you make the source available under MPL.
  • 12. What license Azer used in left- pad?
  • 13. Do What the F**k You Want To Public License (WTFPL) The WTFPL is almost a public domain grant. It is super- permissive. Basically, do whatever you want. Note, however, that it is not a trademark license.