search

gocsaf / csaf

Tools to download or provide CSAF (Common Security Advisory Framework) documents.
https://csaf.io
40 stars 23 forks source link

Change License to Apache 2.0 #532

Closed tschmidtb51 closed 7 months ago

tschmidtb51 commented 7 months ago

Dear contributors, We would like to change the license from MIT to Apache 2.0 to avoid any patent claims. This includes (but is not limited to) all currently existing code and all future code.

@Intevation: @bernhardreiter, @cintek @juan131 @santosomar

Are you okay with this?

santosomar commented 7 months ago

I'm ok with it. Switching from the MIT license to the Apache 2.0 license can be a good decision if you are concerned about patent claims. The Apache 2.0 license offers an explicit grant of patent rights from contributors to users, which the MIT license does not provide. This patent grant means that contributors cannot bring patent lawsuits against users of the software for using their contributed technology, providing more legal protection regarding patents. Additionally, the Apache 2.0 license includes provisions for handling contributions and trademarks more explicitly than the MIT license, which might be beneficial depending on the nature of your project and its contributors. However, it's also slightly more complex and restrictive than the MIT license, particularly around the requirements to provide notices and attributions. This could potentially increase the burden on downstream users who wish to redistribute the software. However, that should not be a showstopper.

juan131 commented 7 months ago

I'm okay with this license change.

bernhardreiter commented 7 months ago

We from Intevation are also fine with the change!

As everyone has agreed, we will now go ahead and implement it.

bernhardreiter commented 7 months ago

The switch was done with #535.

While doing so, we've found #534 And related #527 is still open.