Skip to content

[Open question] Why are so many open-source projects, particularly projects written in Rust, MIT licensed?

Technology
14 9 71
  • cross-posted from: https://programming.dev/post/30924455

    A few people pointed out that many [R]ust projects were MIT licensed and since then I indeed have seen MIT licensed projects everywhere in Rust. Then I found the link of this post and it looks like MIT was by far the most popular license in all of opensource in 2023.

    Any ideas why?

  • cross-posted from: https://programming.dev/post/30924455

    A few people pointed out that many [R]ust projects were MIT licensed and since then I indeed have seen MIT licensed projects everywhere in Rust. Then I found the link of this post and it looks like MIT was by far the most popular license in all of opensource in 2023.

    Any ideas why?

    If you want to put an idea out there, permissive licenses are the most likely to promote it. Any individual or organization can use it without restrictions (or restrictions that aren't unpalatable to most). So if what you're trying to promote is an idea, a technique, or a standard, this type of license allows it to have the greatest reach.

  • cross-posted from: https://programming.dev/post/30924455

    A few people pointed out that many [R]ust projects were MIT licensed and since then I indeed have seen MIT licensed projects everywhere in Rust. Then I found the link of this post and it looks like MIT was by far the most popular license in all of opensource in 2023.

    Any ideas why?

    It's an easy license to reason about, allows for basically any project to use it, and you don't need to worry about trying to enforce it (Because the GPL is only as good as your lawyers are)

  • cross-posted from: https://programming.dev/post/30924455

    A few people pointed out that many [R]ust projects were MIT licensed and since then I indeed have seen MIT licensed projects everywhere in Rust. Then I found the link of this post and it looks like MIT was by far the most popular license in all of opensource in 2023.

    Any ideas why?

    The crux of it is that it allows for commercial use without needing to distribute the source code. Whether that's a good thing or not depends on who you ask. There's basically a continuum for open source software with GPLv3 at one end and MIT at the other.

    GPLv3 guarantees that corporations can't play games with patents or weird DRM to hobble an open source library and tie it to their closed source product. A lot of corporations will specifically bar employees from using GPLv3 code out of fear it could force them to open source their proprietary code as well.

    At the other extreme you've got MIT which basically says do what you want with it. Fork it, embed it in your projects, sell copies of it if you want. Anything goes as long as you include a copy of the MIT license along with your software.

    Rust tends to get a lot of commercial usage so GPLv2 or MIT tend to be chosen over GPlv3, and between them most companies feel more comfortable with MIT.

  • If you want to put an idea out there, permissive licenses are the most likely to promote it. Any individual or organization can use it without restrictions (or restrictions that aren't unpalatable to most). So if what you're trying to promote is an idea, a technique, or a standard, this type of license allows it to have the greatest reach.

    People seem to forget that most of the open source language library code out there is written by people working for companies, being sponsored by companies or writing it so they can use it where they work. Some might start out as hobbiest projects but if it survives and grows it eventually will be sponsored in some form. Even if indirectly by some guy that wants to use it where he works.

  • People seem to forget that most of the open source language library code out there is written by people working for companies, being sponsored by companies or writing it so they can use it where they work. Some might start out as hobbiest projects but if it survives and grows it eventually will be sponsored in some form. Even if indirectly by some guy that wants to use it where he works.

    From what i understand if you wrote it you can just license the public version via GPL and license the private version that you wrote for your job what ever you want since you own it.

    This assumes you wrote the project without company tools and on your free time.

  • From what i understand if you wrote it you can just license the public version via GPL and license the private version that you wrote for your job what ever you want since you own it.

    This assumes you wrote the project without company tools and on your free time.

    You can always use your own code however you want. However, if your project starts to get contributions from other people, that's where it can start to become more muddy.

  • From what i understand if you wrote it you can just license the public version via GPL and license the private version that you wrote for your job what ever you want since you own it.

    This assumes you wrote the project without company tools and on your free time.

    The company you work for will likely not like that. Needs a special case license to be drawn up would probably need to involve lawyers and cost far more then is worth the hassle. Vastly easier just to give it a MIT license.

  • From what i understand if you wrote it you can just license the public version via GPL and license the private version that you wrote for your job what ever you want since you own it.

    This assumes you wrote the project without company tools and on your free time.

    If you license your project under GPL, and somebody submits some code (like through a pull request) that ends up in the library you use, you are now also bound by the GPL license, meaning you also have to publish the source of any derivatives.

    The way to avoid it is to use something like a CLA, requiring every contributor to sign an agreement giving you special rights to their code, so you can ignore the GPL license in relation to the code they wrote. This works, but is obviously exploitative, taking rights to contributions while giving out less.

    It also means if somebody forks the project, you can't pull in their changes (if you can't meet GPL terms, of course), unlike with MIT, where by default everybody can make their own versions, public or private, for any purpose.

    Though it's worth noting, if you license your code under MIT, a fork can still add the GPL license on top, which means if you wanted to pull in their changes you'd be bound to both licenses and thus GPL terms. I believe this is also by design in the GPL license, to give open-source an edge, though that can be a bit of a dick move when done to a good project, since it lets the GPL fork pull in changes from MIT versions without giving back to them.

  • If you license your project under GPL, and somebody submits some code (like through a pull request) that ends up in the library you use, you are now also bound by the GPL license, meaning you also have to publish the source of any derivatives.

    The way to avoid it is to use something like a CLA, requiring every contributor to sign an agreement giving you special rights to their code, so you can ignore the GPL license in relation to the code they wrote. This works, but is obviously exploitative, taking rights to contributions while giving out less.

    It also means if somebody forks the project, you can't pull in their changes (if you can't meet GPL terms, of course), unlike with MIT, where by default everybody can make their own versions, public or private, for any purpose.

    Though it's worth noting, if you license your code under MIT, a fork can still add the GPL license on top, which means if you wanted to pull in their changes you'd be bound to both licenses and thus GPL terms. I believe this is also by design in the GPL license, to give open-source an edge, though that can be a bit of a dick move when done to a good project, since it lets the GPL fork pull in changes from MIT versions without giving back to them.

    In my case, the repository does not allow pull requests so it's fine.

  • The crux of it is that it allows for commercial use without needing to distribute the source code. Whether that's a good thing or not depends on who you ask. There's basically a continuum for open source software with GPLv3 at one end and MIT at the other.

    GPLv3 guarantees that corporations can't play games with patents or weird DRM to hobble an open source library and tie it to their closed source product. A lot of corporations will specifically bar employees from using GPLv3 code out of fear it could force them to open source their proprietary code as well.

    At the other extreme you've got MIT which basically says do what you want with it. Fork it, embed it in your projects, sell copies of it if you want. Anything goes as long as you include a copy of the MIT license along with your software.

    Rust tends to get a lot of commercial usage so GPLv2 or MIT tend to be chosen over GPlv3, and between them most companies feel more comfortable with MIT.

    A lot of corporations will specifically bar employees from using GPLv3 code out of fear it could force them to open source their proprietary code as well.

    That's based on a fundamental misunderstanding of GPLv3, or (more likely) bad faith.

  • If you want to put an idea out there, permissive licenses are the most likely to promote it. Any individual or organization can use it without restrictions (or restrictions that aren't unpalatable to most). So if what you're trying to promote is an idea, a technique, or a standard, this type of license allows it to have the greatest reach.

    And if you're trying to maintain an open ecosystem, use GPL.

  • From what i understand if you wrote it you can just license the public version via GPL and license the private version that you wrote for your job what ever you want since you own it.

    This assumes you wrote the project without company tools and on your free time.

    This assumes you wrote the project without company tools and on your free time.

    Even then. some employment contracts try to take the piss and claim ownership of anything you produce while you're employed. Clauses like that are unenforceable in many jurisdictions, but I've taken the liberty of redlining them before signing the contract. That means another half-day wating for Legal to look at it, but it's worth it for the removal of ambiguity about what I intend to do. By the way, I've never had an offer withdrawn for doing that.

  • It's an easy license to reason about, allows for basically any project to use it, and you don't need to worry about trying to enforce it (Because the GPL is only as good as your lawyers are)

    you don’t need to worry about trying to enforce it (

    By the simple expedient of there being essentially nothing you can enforce.

  • YouTube is getting rid of its Trending page and Trending Now list

    Technology technology
    51
    194 Stimmen
    51 Beiträge
    337 Aufrufe
    I
    Oh no! All those pages i block by turning my youtube history off!
  • Judge briefly pauses 23andMe bankruptcy sale amid California's appeal

    Technology technology
    1
    22 Stimmen
    1 Beiträge
    13 Aufrufe
    Niemand hat geantwortet
  • 83 Stimmen
    3 Beiträge
    27 Aufrufe
    I
    Facial recognition hates jugalos and adversarial clothing patterns
  • 73 Stimmen
    13 Beiträge
    74 Aufrufe
    F
    They have a tiny version that is listed as 1000 on their website, plus the simulation is FOSS
  • An AI video ad is making a splash. Is it the future of advertising?

    Technology technology
    2
    10 Stimmen
    2 Beiträge
    24 Aufrufe
    apfelwoischoppen@lemmy.worldA
    Gobble that AI slop NPR. Reads like sponsored content.
  • YouTube’s new anti-adblock measures

    Technology technology
    57
    217 Stimmen
    57 Beiträge
    296 Aufrufe
    M
    I wish I could create playlists on Nebula.
  • Catbox.moe got screwed 😿

    Technology technology
    40
    55 Stimmen
    40 Beiträge
    252 Aufrufe
    archrecord@lemm.eeA
    I'll gladly give you a reason. I'm actually happy to articulate my stance on this, considering how much I tend to care about digital rights. Services that host files should not be held responsible for what users upload, unless: The service explicitly caters to illegal content by definition or practice (i.e. the if the website is literally titled uploadyourcsamhere[.]com then it's safe to assume they deliberately want to host illegal content) The service has a very easy mechanism to remove illegal content, either when asked, or through simple monitoring systems, but chooses not to do so (catbox does this, and quite quickly too) Because holding services responsible creates a whole host of negative effects. Here's some examples: Someone starts a CDN and some users upload CSAM. The creator of the CDN goes to jail now. Nobody ever wants to create a CDN because of the legal risk, and thus the only providers of CDNs become shady, expensive, anonymously-run services with no compliance mechanisms. You run a site that hosts images, and someone decides they want to harm you. They upload CSAM, then report the site to law enforcement. You go to jail. Anybody in the future who wants to run an image sharing site must now self-censor to try and not upset any human being that could be willing to harm them via their site. A social media site is hosting the posts and content of users. In order to be compliant and not go to jail, they must engage in extremely strict filtering, otherwise even one mistake could land them in jail. All users of the site are prohibited from posting any NSFW or even suggestive content, (including newsworthy media, such as an image of bodies in a warzone) and any violation leads to an instant ban, because any of those things could lead to a chance of actually illegal content being attached. This isn't just my opinion either. Digital rights organizations such as the Electronic Frontier Foundation have talked at length about similar policies before. To quote them: "When social media platforms adopt heavy-handed moderation policies, the unintended consequences can be hard to predict. For example, Twitter’s policies on sexual material have resulted in posts on sexual health and condoms being taken down. YouTube’s bans on violent content have resulted in journalism on the Syrian war being pulled from the site. It can be tempting to attempt to “fix” certain attitudes and behaviors online by placing increased restrictions on users’ speech, but in practice, web platforms have had more success at silencing innocent people than at making online communities healthier." Now, to address the rest of your comment, since I don't just want to focus on the beginning: I think you have to actively moderate what is uploaded Catbox does, and as previously mentioned, often at a much higher rate than other services, and at a comparable rate to many services that have millions, if not billions of dollars in annual profits that could otherwise be spent on further moderation. there has to be swifter and stricter punishment for those that do upload things that are against TOS and/or illegal. The problem isn't necessarily the speed at which people can be reported and punished, but rather that the internet is fundamentally harder to track people on than real life. It's easy for cops to sit around at a spot they know someone will be physically distributing illegal content at in real life, but digitally, even if you can see the feed of all the information passing through the service, a VPN or Tor connection will anonymize your IP address in a manner that most police departments won't be able to track, and most three-letter agencies will simply have a relatively low success rate with. There's no good solution to this problem of identifying perpetrators, which is why platforms often focus on moderation over legal enforcement actions against users so frequently. It accomplishes the goal of preventing and removing the content without having to, for example, require every single user of the internet to scan an ID (and also magically prevent people from just stealing other people's access tokens and impersonating their ID) I do agree, however, that we should probably provide larger amounts of funding, training, and resources, to divisions who's sole goal is to go after online distribution of various illegal content, primarily that which harms children, because it's certainly still an issue of there being too many reports to go through, even if many of them will still lead to dead ends. I hope that explains why making file hosting services liable for user uploaded content probably isn't the best strategy. I hate to see people with good intentions support ideas that sound good in practice, but in the end just cause more untold harms, and I hope you can understand why I believe this to be the case.
  • 6 Stimmen
    4 Beiträge
    28 Aufrufe
    T
    Oh I agree. I just think is part of the equation perhaps the thinner and lighter will enable for better processor? Not an AR guy , although I lived my oculus until FB got hold of it. Didn't use it ever again after that day.