Open Source Software and Corporate Influence(alilleybrinker.com) |
Open Source Software and Corporate Influence(alilleybrinker.com) |
All were a little surprised by the question. Most interpreted it as “do you release and maintain your own open source software under the banner of your company.” When I clarified that I would count spending time to make a quality issue reproduction or fixing a bug and sending a PR, I got one person who said they had. They sent a patch to fix a bug, when I dug in why: they told me there were zero workarounds and the bug blocked a critical feature, if they didn’t upstream a fix successfully they would have to fork and take on maintenance (of that fork).
I share this, because I feel that the many developers don’t quite realize that they are able to do these actions (bystander effect). And many don’t know how to speak up and advocate for that work in a professional setting.
It’s true that corporate ties to open source are pervasive. I also feel that there’s a huge untapped potential of people who are willing to contribute but aren’t ready or aren’t able.
My talk (on teaching developers how to contribute to open source) wasn’t recorded, but a longer, earlier version was at PhillyETE https://chariotsolutions.com/screencast/philly-ete-2023-how-.... I also maintain a free service for contributors getting started https://www.codetriage.com/ and wrote a paid book on the topic https://howtoopensource.dev/.
1/ Their employment contract specifies that all IP they generate during their employment is owned by their employer. Contributing to open source, as well as being a technical action, is a legal action (that of licensing your contribution under the project license) which they don't have the authority to do as individuals, and therefore must obtain authorisation from their employer.
2/ given the former, some legally conservative projects require a signed contribution agreement from contributors employers. This usually requires the employers legal dept to approve it, since the legal dept reviews all such contracts.
It would be nice if there was some blanket scheme that employers could sign up to to authorise all de-minimis contributions to open source projects, or contributions that are actually useful for the work people are employed to do. But I'm not aware of any such scheme.
Legal hurdles exist, but IMHO are the subject of endless hand wringing and awareness campaigns already. Most in that community are seemingly unaware that devs need much more support: socially, mentally, and tactically. In order to become successful open source contributors.
So really what I’m saying is that making things legally easier isn’t enough. Advocating that people should contribute isn’t enough. We should be actively training and helping to prepare the next generation of contributors. And doing it in a way that doesn’t overly burden existing maintainers.
I would like to see some numbers on how much code labeled "open source" (as opposed to having more of a free software ideology) is contributed by corporations and their employees, versus individuals
I think it's been very clear for 20+ years that the largest open source projects have corporate origins, or big corporate contributors, as I mentioned here: https://news.ycombinator.com/item?id=35941074 (Linux kernel, LLVM, Firefox, Chrome, MySQL, JVM, VSCode, Ubuntu, Red Hat, etc.)
But I wonder what happens when you look at medium size projects and libraries, like those in PyPI, NPM, the Go or Rust package ecosystems, etc.
Are corporations contributing closer to 20% of the code, or 80% of the code? I think there is a lot of code contributed by medium size companies, e.g. in the PHP ecosystem there seem to be many little companies
"1998: Many major companies such as IBM, Compaq and Oracle announce their support for Linux. The Cathedral and the Bazaar is first published as an essay (later as a book), resulting in Netscape publicly releasing the source code to its Netscape Communicator web browser suite. Netscape's actions and crediting of the essay[68] brings Linux's open source development model to the attention of the popular technical press. In addition a group of programmers begins developing the graphical user interface KDE. Linux first appears on the TOP500 list of fastest supercomputers.[69] The ARM port (initiated in 1994[70][71]) is merged"
For example, many developers despise React.js; I once interviewed for a dev role for Facebook years ago and they asked me if "I had any qualms about using React" (paraphrasing) and the interviewer acknowledged that many candidates did not like using React... Yet React has a near-monopoly on frontend frameworks.
The whole media landscape around open source dev tools has been a nightmare. We're being pushed in specific directions, towards a small number of silver bullet solutions which do not suit most use cases.
It feels like all the authors of popular tools form a corporate insider clique and no tools outside of that social network is allowed to get any traction at all.
Adoption by whom?
What is it that you think wider adoption of open source would (or should) look like without corporate influence?
What is your measure of success there, and do you have any examples of this happening? What open source products have "gained adoption" without corporate influence?
Nowadays, even startups use corporate tools. It's a total media echo-chamber. Everything outside of that is treated as if it doesn't exist. There are some great tools out there which solve real problems but they have few users because nobody can find out about them.
Although adoption I think is largely a matter of marketing. Outside of more people willing to search into open source alternatives themselves, or contribute more to open source projects... what else is there to foster adoption?
If corporate entities weren't doing that, then it would have to be non-corporate entities doing that. No?
OSI is about untangling the licenses such that corporations understand which components carry which legal obligations.
in this way OSI is supporting the use of free software.
In that light the "an alternative of free software" part doesn't make sense to me. at all.
I agree with it as a 'should', though.
gpl is osi approved
You only hear about the tools which received VC funding. It is VC-funding first, then traction, not the other way around as they try to portray it. You can always connect the founders socially to insiders prior to their launching and raising funding. Some failed multiple ventures yet keep receiving funding... but among those which succeed, there is almost always a social connection.
Even in cases where I met a founder who I believed to be 'self-made', turns out there's a story behind him like his wife's parents had sold their company for millions and his brother rubs shoulders with celebrities.