When Your Open Source Tool Turns to the Dark Side
Talkat OSPOCon @ Open Source Summit Europe 2022 · on Wednesday, 2022-09-14· at 16:40· EcoCem Room (Level 2), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Elastic re-licenses Elasticsearch and Kibana from Apache 2.0 to SSPL and Elastic License, then injects checks that break Filebeat and client libraries unless using the official distro; engineers find Apache code entangled with proprietary X‑Pack and telemetry. AWS‑led fork OpenSearch fork reached 1.0 in July 2021 and vendors (Dow Jones, Goldman Sachs, Pinterest, SAP, Zoom, Rackspace, Amazon, Logz.io) migrate. Grafana moves to AGPLv3, triggering CNCF guidance. npm maintainer sabotage of colors (20M weekly downloads) and faker (2M weekly) causes widespread outages.
AI-written summary · about
chapters (9)
- 0:00Start
- 3:18One morning a BOMB dropped on us
- 6:24Shock & Rage in the user community
- 6:58Calls to fork the project to keep it OSS
- 11:01Going Non-OSS Elasticsearch case study
- 15:55Going copyleft Grafana case study
- 21:28Going rogue colors.js & faker.js case study
- 30:02Vetting a new OSS? Here's what to consider
- 32:35Summary
related talks
34mRelicensing: When Your Open Source Tool Turns to the Dark Side
34mWhen Your Open Source Turns to the Dark Side
50mOpen Source as a Business: Strategy, Struggle & Success
44mFORK IT ALL if You Fork It
33mHow Cloud is Changing Open Source
27mFrom Forks to Sporks: The Journey Behind Creating OpenSearch
46mPower Dynamics, Rug Pulls, and Other Corporate Impacts on OSS Sustainability
30mOpen Source Licensing: Use Versus Abuse