Open Source Licensing in a Business World

on YouTube ↗14m

" summary

Four practical license buckets: permissive (MIT/Apache/BSD), copyleft (GPL/LGPL — GPLv2 tolerated, GPLv3 avoided), trialware/dual license (Redis ElasticSearch CockroachDB Terraform Graphana), and generally unsuitable (AGPL network contagion). Examples: statically linking libGMP (LGPLv2/GPLv3) can force an entire BSD project into GPLv3; Terraform and Graphana licensing changes create commercial‑license triggers. Tooling: use SPDX and SBOMs, run SCA scanners, feed results into Dependency Track or Mend, and audit outputs like cdxgen/Parlay for actionable remediation.

AI-written summary · about

" chapters (10)

1. 0:00Introduction to open source
2. 0:45License categories overview
3. 1:49Permissive vs copyleft licenses
4. 3:18GPL risks and tracking
5. 5:02Trialware and dual licensing
6. 6:47AGPL and business impact
7. 8:11Legal compliance importance
8. 8:54Finding and tracking licenses
9. 11:45Tracking compliance tools
10. 13:07Acquisition and open source

" related talks

• 30mOpen Source Licensing: Use Versus AbuseRam Iyengar · KubeDay Singapore 2023
• 01h 38mOpen Source Licensing: Types, Strategies and ComplianceJeff Luszcz · All Things Open 2020
• 51mThe Impact of Leveraging Open SourceJeff Strauss · Devoxx Belgium 2017
• 57mWhat You Need to Know About Open Source—Trust Me, I'm a LawyerJeff Strauss · NDC London 2019
• 42mOpen Source Licenses: Between Parish Wars and RadicalismPierre-Yves Lapersonne · Devoxx France 2022
• 01h 26mOpen Source Software Licenses and Business Models ExplainedPeter Zaitsev · All Things Open 2020
• 48mWhat You Need to Know About Open Source - Trust Me, I'm a LawyerJeff Strauss · Build Stuff 2019
• 41mHow to Choose an Open-Source LicenseMichael Miles · MidCamp 2018