Slashdot Mirror


Apache License Updated to 2.0

Roy_Fielding writes "The Apache Software Foundation has approved an update to the open source Apache License (Version 2.0) that will be mandated across all Apache projects starting on March 1st. I have been working on variations of this license for the past three years, trying to balance the many different goals of the revision. That includes making the license easier for non-ASF projects to use, improving compatibility with GPL-based software, allowing the license to be included by reference instead of listed in every file, clarifying the license on contributions, and requiring a patent license on contributions that necessarily infringe a contributor's own patents. The result is a license that is compatible with other open source licenses, such as the GPL, and yet still remains true to the original goals of the Apache Group and supportive of collaborative development across both nonprofit and commercial organizations." While it has yet to become OSI-certified, it will probably will be so Real Soon Now, and in the meantime it's fun to compare licenses.

37 of 160 comments (clear)

  1. Interesting... by Ashe+Tyrael · · Score: 4, Interesting

    If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.

    I'm no lawyer, but this seems to be saying that if you sue anyone for breach of patent for something in apache, then you lose your patanet license?

    Can someone explain this onein plain english, please?

    --
    "How fine you look when dressed in rage."
    1. Re:Interesting... by Anonymous Coward · · Score: 4, Insightful

      Looks like a standard tit-for-tat clause. Sue me for breaking patent rights and I will rescind your patent rights. Point being that companies using Apache intellectual property should be willing to loan back to the community any IP they develop, and if they aren't willing to make that contribution they shouldn't be a member of the Apache IP community.

    2. Re:Interesting... by JimDabell · · Score: 5, Interesting

      I think it means that if you sue somebody alleging that, say, Apache, infringes upon a patent, you lose your license for Apache.

      If this is true, doesn't this mean that it's not Free Software and non-compliant with the Debian requirements? It seems to be placing a restriction on use rather than redistribution, and is therefore EULA-like.

    3. Re:Interesting... by aTMsA · · Score: 3, Informative
      IANAL, but what it seems to mean in plain english is that you have a license to use all patents existing in the code shared(by the patent owner, of course), and, likewise, you have to grant licenses to the patents that you have and use in the code you add to Apache. If somebody starts threatening with patent lawsuits, he inmediately loses the automatic licenses to all other patents in the code. In practice that means you can no longer continue redistributing it, because you will be infringing many patents.

      IMHO a good deterrent to SCO-like lawsuit happy companies.

    4. Re:Interesting... by IIH · · Score: 5, Insightful
      If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.

      I'm no lawyer, but this seems to be saying that if you sue anyone for breach of patent for something in apache, then you lose your patanet license?

      I'm no lawyer either, but the way I read is that there is software in Apache that is covered by patents, but the owners have given people who use Apache a licence to use them. However, if someone decides to sue over one of their patents in Apache, then they lose the licence from the other patent holders, posibly leaving them open to an infringment suit themselves.

      In short, is seems to say: you play nice, we'll play nice, and we'll all play with everyone's toys, but if you won't let someone play with your toys, then everyone else will gang up on you and not let you play with any of theirs either.

      --
      Exigo spamos et dona ferentes
    5. Re:Interesting... by niew · · Score: 2, Informative
      Whats' IAANAL mean? I Am Am Not A Lawyer?
      I Am _Also_ Not A Lawyer... The parent post already used IANAL ;)
    6. Re:Interesting... by bobbuck · · Score: 2, Funny

      >"Whats' IAANAL mean? I Am Am Not A Lawyer?"
      I Am Also Not A Lawyer
      ITTICBOTCOTD.
      (I Think That Is Correct Based On The Context Of The Discussion.)

    7. Re:Interesting... by Anonymous Coward · · Score: 5, Informative
      I think it means that if you sue somebody alleging that, say, Apache, infringes upon a patent, you lose your license for Apache.


      Not exactly. You don't lose your copyright license to Apache (which is what the Apache license mainly is), you lose the patent licenses. Picture this: suppose five companies contributed to Apache and thus granted you licenses to use their appropriate patents. You then sue one of these companies for patent infringement. The new Apache license means that in this case you may still redistribute Apache (since you still have a copyright license), but you've opened yourself up to being sued by any of the five companies for patent infringement, as you no longer have a license to those patents.

      If this is true, doesn't this mean that it's not Free Software and non-compliant with the Debian requirements? It seems to be placing a restriction on use


      So now you see why this is not the case. You may still use it, but you now run the risk of being sued over patents.

      IANAL, of course.
    8. Re:Interesting... by iomud · · Score: 3, Funny

      I read it as, "If you are native american and soux you may not wear patent leather shoes"

      I could be totally wrong.

    9. Re:Interesting... by Larry+David · · Score: 3, Funny

      Sir, ITTTWTISGPSNAYCOAOTBPUABII. (I Think That This Whole Thread Is Getting Pretty Silly Now As You Cannot Overload Acronyms Or They Become Pretty Unreadable And Become Initialisms Instead)

  2. Maybe I am just stupid but... by Reivec · · Score: 2, Interesting

    Can someone explain to me some specific problems there were with the old license? Not having it in every file I am sure makes things a bit easier, but what else does this do exactly? The original poster didn't make this too clear, and I don't exactly go around studing licenses unless I know it conflicts with something for me personally.

    1. Re:Maybe I am just stupid but... by aTMsA · · Score: 3, Informative

      For one they have added a clause where any code redistributed automatically grants patent licenses to use it, and if you try to litigate some of them, you lose the licenses to other patents not owned by you in the code. In the face of the current legal environment(SCO, code patent extortion, etc...), I think it's a good preventive measure to add it to the license.

    2. Re:Maybe I am just stupid but... by __past__ · · Score: 2, Informative
      The old license included an "obnoxious" advertising clause, similar to the original BSD license, saying that you have to prominently inform users that your derived work includes Apache code (while, on the other hand, you may not use Apache-derivedness for advertising, or even in the product name, so that "Powered by Apache!" or "Reivec's Apache-Based SuperHTTPD" were forbidden)

      * 3. The end-user documentation included with the redistribution,
      * if any, must include the following acknowledgment:
      * "This product includes software developed by the
      * Apache Software Foundation (http://www.apache.org/)."
      * Alternately, this acknowledgment may appear in the software itself,
      * if and wherever such third-party acknowledgments normally appear.
      This is pretty annoying, especially if your project includes parts of many projects that require this. It also made it GPL-incompatible.

      Another thing was that "Apache" and "Apache Software Foundation" was "hardcoded" in the license text in many places, so that you couldn't just use it unmodified for non-apache projects (not that big a problem in practice).

  3. Different definition of fun by Smitty825 · · Score: 3, Funny

    in the meantime it's fun to compare licenses.

    I don't know about CowboyNeal, but I sure have a different definition of fun than he does!

    --

    Doh!
    1. Re:Different definition of fun by MarkusQ · · Score: 2, Funny

      Here I was thinking how much fun it was wading through diffs to try to find the subtile bug I introduced last night by coding 15 minutes past the take-your-hands-away-from-the-keyboard-and-no-one- gets-hurt point, and thinking to my self "this code may be brilliant but I won't know for sure until I remember (and document) why I wrote it this way".

      And all this time I could have been comparing licences! Doh!

      -- MarkusQ

  4. And yet... by heironymouscoward · · Score: 5, Insightful

    After something of the same journey with licenses for my own open source work, I finally came to the conclusion that Richard Stallman had seen the inevitable truth clearly when he designed the GPL, namely that free software thrives best when there is a definite barrier between it and commercial software.

    Our software now uses a dual license model in which it's either licensed for free under the GPL, or licensed for a fee under a standard commercial license.

    Without exageration, nor wanting to start a religious war, I believe the GPL is an astonishingly robust answer to the question of how to share creative works without subsidising commercial interests that inevitably seek to quash the independent creative spirit.

    --
    Ceci n'est pas une signature
    1. Re:And yet... by Kenneth+Stephen · · Score: 2, Interesting

      Well....yes! This whole BSD style vs GPL style licenses really boils down to individual preferences. Your attitude and reason for choosing the ASF / BSD licenses is perfectly valid and I have no quarrel with you over that. I myself would prefer the GPL for all the reasons that the BSD-style license advocates disparage. I do want freedom on my terms or not all all, but then again, isnt that the definition of freedom? I mean, would it make a slave "free" if the slave-owner declared that he is "free" while continuing to subjugate him? It is the slave's point of view that is the ONLY point of view to consider when deciding if he is free. In summary, if you consider the BSD style license to produce free software, thats fine by me. But what I consider free is really GPL style software. Thats just my $0.02 and I'm sticking to it.

      --

      There is no such thing as luck. Luck is nothing but an absence of bad luck.

  5. Re:Patents by Anonymous Coward · · Score: 4, Informative
    why should I donate all my software patents to the FSF for contributing to Apache ?
    You shouldn't have software patents in the first place. But if you do, and you contribute to an Apache Licensed project, you need to license under specific terms (not donate) the relevant (not all) patents to the users of that project (not the FSF, which has nothing to do with this story, or even the ASF). If you aren't willing to let the users use the code you wrote, then the project doesn't want it.
  6. Software patents by Elektroschock · · Score: 4, Insightful

    The Apache License 2 is just a workaround for a real problem. Software patents are bad for development and bad for the economy. The US Federal State Commission called for change in a recent report, the benefits of software patents are falsified by emirical ressearch.

    However, as software patents serve for the benefit of patent attorneys the institutions are intrested in an extension of the system, by widening the scope of patentability regardless of an economic foundation. Politicians like this quantitative patent approach, the result are many trivial patents of low quality and disfunction of the patent system atlarge. Many low quality patents endanger our information society. So it is nice to see that organisation like Foundation for a Free Information Infrastructure build a counter-force to patent lawyer interest groups in Europe. So far the lobby work against software patents and the Eurolinux petition were very succesful. In my opinion we need a world wide movement in order to avoid Eolas vs. MS oder Amazonvs.Barnes&Noble ecc. will happen again. The GNU Public License is incompatible with Patent law and most projects and SME cannot afford to get patents. They, the innovators, don't want or need software patents.

    1. Re:Software patents by Daniel_Staal · · Score: 3, Insightful

      Because you don't patent ideas. You patent implementiations.

      Or at least you should. This is where the current system has gone out of whack. But the point of patents is to encourage people to develop ideas into actual implementations, and then share those with the world.

      Software is something different; it exists in the grey area between an idea and an implementation. It is an expression of an idea. Luckily, we already have something designed to deal with expressions of ideas: copyright. Which is all that should apply to software.

      --
      'Sensible' is a curse word.
  7. Re:Offtopic : Why bother with the Apache section? by Reivec · · Score: 5, Insightful

    I am going to guess that it is because apache is one of the MAJOR reasons linux ever took off in any commercial setting in the first place. Preconfigured apache on linux boxes that were extremely cheap made very attractive web servers to many people and businesses. This was a major boost to linux awareness and usage. I think we all know how popular apache is as a webserver, and I think it is fair to say that the majority of apache servers out there are running on a *nix platform. Without apache, these platforms may not have ever got much exposure.

  8. Is it actually GPL compatible? by Carl · · Score: 4, Insightful
    It would be really great if this license was GPL compatible since that would allow much more cooperation and use of Apache licensed works in other free software projects. But is it actually GPL-compatible?

    I couldn't find the Apache 2.0 license on the FSF license list. The only "official" remark seems to be the following email thread which says:

    Whether or not they are considered compatible by the FSF is an opinion only they can make, but given that a derivative work consisting of both Apache Licensed code and GPL code can be distributed under the GPL (according to *our* opinion), there really isn't anything to be discussed.

    Maybe it was a bit premature to announce this license without waiting for OSI approval and requesting feedback from the FSF. Of course the Apache group can do whatever they want without asking for approval and blessing from other Open Source and Free Software groups. But it would have been nice to try to cooperate a bit more.

    1. Re:Is it actually GPL compatible? by Tim+C · · Score: 3, Insightful

      But it would have been nice to try to cooperate a bit more.

      Well, not to flame or anything, but cooperation works both ways. The FSF appears (to me) to be completely unbending in its interpretation of the spirit of the GPL, and what is and isn't compatible with it. They'll help you to change your licence to make it compatible, but they won't shift a millimetre on their own position.

      Okay, so their philosphical and moral stance more or less requires that behaviour, but it does seem a little unfair to criticise other groups for not cooperating.

    2. Re:Is it actually GPL compatible? by Tarrio · · Score: 4, Insightful

      When you make a work consisting in the combination of works covered by two different licenses, the resulting work must be licensed under the terms of both licenses at the same time. If they have conflicting clauses, then the licenses are incompatible and the work is not distributable at all.

      The GPL says a couple of things about this: in clause 2 it says: "[...] when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it." In clause 4 it says "You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License." And in clause 6 it says "Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein."

      In plain English this means: when you make the combined work I talked about before, the whole work must be distributed under the terms of both licenses combined; but as the GPL requests that it be distributed under the terms of the GPL (no less, no more), if the "other" license includes restrictions the GPL does not have, then both licenses are incompatible and you cannot distribute the resulting work.

      So, whether your license is GPL-compatible is not just a matter of opinion. You only have to ask yourself: "does this license have any restrictions the GPL does not have?" If it does, then the license is GPL-incompatible. If it does not, then the license is GPL-compatible.

    3. Re:Is it actually GPL compatible? by FattMattP · · Score: 2
      Okay, so their philosphical and moral stance more or less requires that behaviour, but it does seem a little unfair to criticise other groups for not cooperating.
      It's not unfair. The FSF is extremely easy to predict and understand. They'd prefer that you use the GPL. Period. They have no interest in making their license compatible with others. They'd prefer that you use the GPL and that's the end of it. Have you noticed that it's all the other licenses that are striving to be compatible with the GPL, not the other way around?
      --
      Prevent email address forgery. Publish SPF records for y
    4. Re:Is it actually GPL compatible? by Carl · · Score: 2, Insightful
      The FSF appears (to me) to be completely unbending in its interpretation of the spirit of the GPL, and what is and isn't compatible with it. They'll help you to change your licence to make it compatible, but they won't shift a millimetre on their own position. Okay, so their philosphical and moral stance more or less requires that behaviour, but it does seem a little unfair to criticise other groups for not cooperating.

      Agreed. my point was that it would have been nice of the Apache hackers to send a little note to important groups like the OSI, Debian and the FSF to announce their intend to use this license. They worked on it for three years. How hard was it to send a little note to licensing@fsf.org, debian-legal@debian.org and osi@opensource.org saying

      hey guys/girls, we are going to use the following license for our projects. Could you tell us whether or not it would qualify as "Open Source"/"Free Software"/"DFSG Free" and/or whether you see any problems or incompatibilities with other licenses/projects wishing to use it?
      Then they could have corrected any little mistakes in it and made it really clear that it was OSI-certified and/or GPL-compatible. That would have been nice to the community as a whole. It is a bit silly that they created confusion about these points when it was so easy to make it all cristal clear by contacting the right people in the first place. It is not that bad if this new Apache license isn't OSI-certified or GPL-incompatible. But it is damn nice to know in advance.
  9. looks trivialy GPL-incompatible by ciaran_o_riordan · · Score: 3, Interesting

    They tried "improving compatibility with GPL-based software", but is it compatible or not?

    From a quick read it seems to be a valid Free Software license, but clause 4.d may make it incompatible with the GPL. This would be unfortunate for such a trivial condition. GPL doesn't allow placing additional restrictions on distribution, so is requiring a NOTICE file, and additional restriction?

    The patents section might also be GPL-incompatible, but it might be GPLv3-compatible when GPLv3 comes out.

    Has anyone seen of any comments from FSF about this?

    Altogether, it's a good license, and vastly superior to the last proposal which was ~100 pages long. (slight exageration)

  10. Lawschool? by ciryon · · Score: 2, Interesting

    Is going to lawschool a requirement for beeing a geek nowadays?

    Ciryon

  11. question about apache license by gargle · · Score: 2, Interesting

    Does the Apache license allow commercial distribution of code based on the apache code, in the case where the modified source code is included as part of the commercial package, but the end-user is prohibited from redistributing the source code?

  12. Dual licensing by heironymouscoward · · Score: 5, Informative

    I thought it was clear but I'll explain again.

    My company writes software that we like to distribute as free software. I started doing this in 1995, and the tools and packages I make are quite widely ported and used. When I started my company our policy was that anything we could not rapidly turn into a product we would release as open source. Software that is not used dies, we figured.

    Our license was a BSD-style license that basically allowed people to do what they liked with the software.

    In 2001 I noticed that some commercial products incorporating our code were being sold. Very good, I thought, it's nice to see our work being used. But when I asked them to provide us with some of the extensions and patches they'd made, the answer was "no, this is not possible". Now, seeing people use the results of years of work then refusing to contribute anything back rather annoyed me. My company was selling support licenses for our products, and these were in fact our competitors.

    The solution came in the form of an article by Richard Stallman which explained why using the LGPL was in fact giving help to closed-source developers who directly or indirectly compete with open source developers.

    We decided to switch to the GPL, and in 2002 we moved all our OSS products to this license. At the same time, we had a number of commercial licensees. To give these groups a non-viral package, we developed a dual licensing model.

    Since the code is ours, it's our right to license it to specific users under specific terms. The GPL is not incompatible with commercial licenses, so long as it's the copyright holder who decides what license to apply in each case.

    To summarize: for OSS developers we use the GPL, for commercial developers we use a commercial license.

    It works well. We've had no GPL violations, and enough commercial licensees to make it worth developing our core packages further.

    --
    Ceci n'est pas une signature
  13. Strange by Iplaw-dc · · Score: 4, Interesting

    What is unusual about this license is that it grants a license to the copyright. Most licenses only grant a right contained and protected by copyright law. For example, a company may grant a license to distribute a good, or to reproduce elements of an original work of authorship. I have never heard of being able to license a copyright. We assign and transfer copyrights and we license trademarks and rights granted under tm, (c), and or patent. I wonder if this agreement is really valid. Lets say that someone modifies some code and then registers the copyright and does not inform the Library of Congress about the Apache license. Moreover, what if the "thief" then files suit against derivative authors. The problem here is that fed law trumps the law of contracts and under federal law you can share copyright in a work- it's called joint ownership. One suggestion is that Apache could grant a nonexclusive right to create derivative works so long as they meet the highest standards in the industry. It would be interesting to see if Apache filed the copyright through the LOC? It might be interesting to look into how foreign civil law treats software because it is more natural law/moral rights based and does not allow corporate entities to own the full ip rights of a creator.

    --
    Jax
  14. IANAL but by sniggly · · Score: 2, Funny
    it's fun to compare licenses.

    IANAL but you sure sound like one :)

    --
    Of those to whom much is given, much is required.
  15. Re:GPL by _pruegel_ · · Score: 2, Informative

    The GPL requires to share the source code for modifications and also forces any software linked to GPL code to be licensed under the GPL as well. The Apache license does neither. From my POV the Apache License is more free then the GPL while the GPL tries to keep free software free. IMHO a good compromise is the LGPL which protected the freedom of your work but does not require others to open their source when linking to your stuff.

  16. 100% correct and in agreement by occam · · Score: 3, Interesting

    Software (et al.) patents are essentially:

    - legalized monopolies, and monopolies are bad.
    - legal minefields for software initiatives, and mines are extremely counterproductive in (real and analogous) terms.
    - an involuntary subsidy by the software industry for the self-serving legal industry.
    - an impediment to open (and commercial) software development.
    - an idea based solution to an implementation driven market (ideas are cheap; implementation is hard).
    - a backwards implementation benefitting manipulators of the system, not the brilliance in innovation.
    - an upside down system benefitting those with big pockets (and fat lawyers) instead of the underdogs (for whom patents were very originally intended).
    - a joke in any industry (e.g., software) where production is a mere disk copy away (i.e., there is no manufacturing impediment in software, so even the original concept of patent protection is absurd)
    - completely absurd to implement in theory (due to impossibility of any patent examiner's job) and practice considering the infinitude of like ideas in different forms (with patents as with novels, plots, etc.)
    - absurd since software is a written form of thought --- and you shouldn't be able to patent (anything but especially) thoughts.

    That's just off the top of my head.

    IOW, patents are a Lehman (prounounced "lemon") law perpetuated so the legal industry can forcefeed carcinogenic lemonade to the software industry.

    1. Re:100% correct and in agreement by Elektroschock · · Score: 2, Interesting

      /*If you're an inventor and you invent something useful, after having spent many hours and money, why should somebody else be free to come along and simply steal your idea? Patents exist specifically to grant limited-time monopolies to reward inventors for their effort. If you're another inventor and want to cash-in on a patented invention, well it forces your hand to invent something even better or perhaps even revolutionary. Again, patents promote innovation.
      */

      However, the system does not work in the software industry. As a lawmaker you only apply the bureaucratic patent system if its benefits are higher than the costs. The current patent system is designed for manufacturing, not for a dynamic industry such as the software industry where innovation "just happens" and competition is about the race for innovation. Copyrights protects us very well, while software patents are held by mayor players (i.e. their patent offices) and patent privateers such as Eolas. Most software patents cover trivial issues. software developers don't have the time to file patent. Innovation is a natural effect of competition. You can't avoid innovation. We don't need reward in form of patent monopolies for our innovation force as the system doesn't work for us. I am not able to pay the fees for a patent. I cannot survive a patent lawsuit. In fact when my GPL software gets a letter from a patent attorney it has to stop.

      The Patent system makes many mistakes. Prior art is usually not recognized. Limits set by law to patentability are circumvented via very broad claims.

      Patents are an inefficient tool. They don't help me. The software industry grew large despite the existence of patents, not because of patent regulation.

      Patents are not common usage in the software industry where real innovation can be done by very few persons who actually IMPLEMENT something. The race for the best implementation and the consumer adaption shouldn'd be replaced by monopoly law that limits competition or even kills development. Patents may be useful in other industries, in the software industry they are very harmful.

      I remind you of von Hayek's remarks towards the patent system. He was very critical about the patent system like all liberal economists he fought against state inteference into the market:
      "In the field of industrial patents in particular we shall have seriously to examine whether the award of a monopoly privilege is really the most appropriate and effective form of reward for the kind of risk bearing which investment in scientific research involves."

      Nobody even thought of patents on business processes or data processing in these days!

    2. Re:100% correct and in agreement by socalmtb · · Score: 2, Interesting
      - a joke in any industry (e.g., software) where production is a mere disk copy away (i.e., there is no manufacturing impediment in software, so even the original concept of patent protection is absurd)

      The pharmacutical industry is a lot like the software industry. There is an extremely low cost of production and an extremely high cost of development. Especially in the pharmacutical industry where companies must go through expensive clinical trials and the FDA approval process.

      Patents are responsible for developments in this industry because they allow companies to recover the hundredes of millions spent on research.

      Drug company profits allow them to reinvest in more research that might one day lead to a cure for cancer. And yes, who ever finds a cure for cancer (or AIDS) is going to make a lot of money.

      Corporate profits are not evil. They are what has driven nearly every single societal development we know.

  17. How does a big project do a license change? by Kegetys · · Score: 2, Interesting

    This might be a tad offtopic but anyway, a while ago I was wondering how a big OSS project (like Apache) does a license change? If there are dozens of people involved who have contributed their work to the project under license X, wouldn't you need to ask each and every one of those people if you want to change that license in any way?