Upload
patricia-gordon
View
218
Download
0
Tags:
Embed Size (px)
Citation preview
Software Licences
19 May 2015
Tim Harris, Bird & Bird LLP
What are we going to look at?
- Myths- Overview of Software Licences - Overview of OSS- Proprietary vs Open Source- Permissive v Restrictive- Key OSS Licences in detail- OSS Business Models- Considerations for Developers
Page 2© Bird & Bird LLP 2015
There are a number of OSS myths
Open SourceSoftware
licences arenot
enforceable
Open SourceSoftware can't
be used incompanies
Open SourceSoftware can't be used withproprietary
software
All OpenSource Software
developmentsmust be made
public
Nobody knowsIf we use
Open SourceSoftware
You can't charge for
Open SourceSoftware
All OpenSource Software
licences areviral
All OpenSource Software
is free
You can't makemoney fromOpen Source
Open SourceMyths
Open SourceSoftware can't be used with
other OSS
All these myths are wrong…….
Software Licensing: Overview
Why do I need a software licence at all?
?
Page 5© Bird & Bird LLP 2015
OSS: Overview
What is open source software (OSS)?
Page 7© Bird & Bird LLP 2015
1. The freedom to run the program for any purpose.
2. The freedom to study how the program works and change it so it does your computing as you wish.
3. The freedom to redistribute copies so you can help your neighbour.
4. The freedom to distribute copies of your modified versions to others.
Open Source Initiative & Open Source Definition
1. Free redistribution
2. Source Code
3. Derived Works
4. Integrity of the Author's Source Code
5. No discrimination against persons or groups
6. No discrimination against fields of endeavour
7. Distribution of licence
8. Licence must not be specific to a product
9. Licence must not restrict other software
10.Licence must be technology neutral
Page 8© Bird & Bird LLP 2015
Page 9© Bird & Bird LLP 2015
Source: //osrc.blackducksoftware.com/data/licenses/
What are the most popular OSS licences?
What are the most popular OSS licences?
Licence Permissive or Restrictive?
2010%
2014%
1 GPL 2.0 Restrictive 49 27
2 MIT licence Permissive 4 16
3 Apache Licence 2.0 Permissive 4 15
4 GPL 3.0 Restrictive 6 11
5 BSD Licence 2.0 Permissive 6 7
6 Artistic Licence (Perl) Restrictive 9 5
7 LGPL 2.1 Restrictive 9 5
8 LGPL 3.0 Restrictive 0.5 2.5
9 Microsoft Public Licence (Ms-PL)
Permissive 1.6 2.5
10 Eclipse Public Licence (EPL) Restrictive 0.5 2Page 10© Bird & Bird LLP 2015
Proprietary licences v. OSS licences
Page 12© Bird & Bird LLP 2015
Licence fee or royalties payable
No right to modify No access to source code
Some warranties and other protection
Restrictions on right to use
Restrictions on distribution
Proprietary licences
Page 13© Bird & Bird LLP 2015
• Still a licence – ownership remains with licensor!• Scope of licence is not restricted:
• Right to use for any purpose
• No restriction on duration of licence
• No restriction on number of users etc.
• You are entitled to modify the software yourself• Right to re-distribute the software to any person• Generally, no warranties as to condition or
performance• Generally, no protection against IPR
infringement claims• No licence fees or royalties payable to the
licensor
OSS licensing – key concepts
OSS licences: permissive v. restrictive
Page 15© Bird & Bird LLP 2015
But not simply public domain!
Ability to combine with proprietary software
Modifications can remain proprietary
Distribute object code version only
Minimal restrictions on use
Distribute under other licence terms
Permissive OSS licences
The philosophy of copyleft
"[they] allow uncooperative people to convert the program into proprietary software. They can make changes, many or few, and
distribute the result as a proprietary product. People who receive the program in that modified form do not have the freedom that
the original author gave them; the middleman has stripped it away"
- http://www.gnu.org/copyleft/
To copyleft a program, we first state that it is copyrighted; then we add distribution terms … that gives everyone the rights to use, modify, and redistribute the program's code, or any program derived from it, but only if the distribution terms are unchanged.
Thus, the code and the freedoms become legally inseparable.
© Bird & Bird LLP 2015Page 16
Page 17© Bird & Bird LLP 2015
More complex terms and conditions
No obligation to re-distribute
Must re-distribute on same licence
terms
"Viral" effect on proprietary
software
No restrictions on your own use
Source code must be made available
Restrictive OSS licences
Page 18© Bird & Bird LLP 2015
Permissive
GPL
LGPL Mozilla
MIT
Apache
BSD
Strong copyleft Permissive licenses
Restrictive
Weaker copyleft
AGPL
The OSS licence spectrum
Let's look at some examples …
The beer licence
<[email protected]> wrote this file.
As long as you retain this notice you can do whatever you want with this stuff.
If we meet some day, and you think this stuff is worth it, you can buy me a beer in return.
© Bird & Bird LLP 2015Page 20
OSS imposes a number of requirements
ProceduralObligations
DerivativeWorks
Distribution Aggregation
OSS imposes a number of requirements
ProceduralObligations
DerivativeWorks
Distribution Aggregation
The MIT licence
Copyright © <year> <owner>
Permission is hereby granted, free of charge, to any person obtaining a copy of this software … to deal in the software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the software
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED … IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY … ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE
Grant of broad rights to use, modify etc.
Disclaimer of liability by
authors
Obligation to include copyright
notices etc.
Note: Licence terms have been edited for these purposes
© Bird & Bird LLP 2015Page 23
The BSD licenceCopyright © <Year> <Owner>
Redistribution and use in source and binary forms, with or without modification, are permitted provided that:
- Redistributions must retain the above copyright notice, this list of conditions and the following disclaimer.
- Neither the name of <ORGANIZATION> nor its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES … ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY … DAMAGES … ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Grant of broad rights to use etc.
Disclaimer of liability by
authors
Obligation to include copyright
notices etc.
Note: Licence terms have been edited for these purposes
Non-endorsement obligation
© Bird & Bird LLP 2015Page 24
The Apache licence
Each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.
You may … provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License.
Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof
Broad grant of rights; no obligation to distribute source
code
Different approach to the "viral" issue
Note: Licence terms have been edited for these purposes
Explicit that you can use other licence
terms
© Bird & Bird LLP 2015Page 25
OSS: Business Models
2015 Future of Open Source Survey (Black Duck)• 78% of companies run open source• Use of Open Source to run Business IT
environments has gone up 2X since 2010• More than 50% said that more than half of
their engineers are working on OSS• More than 66% consider OSS options before
proprietary software alternatives
© Bird & Bird LLP 2015Page 27
Why do companies use OSS?
The Key OSS LicencesDevelopers Flexibility, cost savings, reliability
Start-ups Removes barriers to entry (cost) & growth (difficulty in scaling)
SMEs Balanced views of OSS benefits and pitfalls
Large Corporates
Risks associated with OSS major barrier to entry. Use of OSS difficult to control
OSS Business Models
• Professional Services on top of OSS• Dual Licensing• Re-licensing under proprietary licence• Proprietary extensions• Proprietary data• Advertising-supported software• [SaaS]
© Bird & Bird LLP 2015Page 29
Developers: How to approach OSS
How to approach developing with OSS
• Identify the OSS concerned and the licence terms under which the OSS has been made available
• Assess whether that licence imposes any particular relevant terms (and if so, what)?
• Assess the effect that those terms have on your ability to exploit the Work, Derived Works etc.
© Bird & Bird LLP 2015Page 31
Restrictive OSS Licences
1. Your internal use of code GPL v.2(Section 0)
Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted
GPL v.3(Section 2)
This License explicitly affirms your unlimited permission to run the unmodified Program ... You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force.
Key Points• You can use GPL code internally without
restriction• You are not obliged to distribute GPL code• "Distribute" (GPL v.2) v. "convey" (GPL v.3)
© Bird & Bird LLP 2015Page 33
What we are going to look at:Requirements imposed by OSS licences
DerivativeWorks
ProceduralObligations
© Bird & Bird LLP 2015Page 34
Distribution Aggregation
Mechanics of distribution under GPL
Key Points• Distribution is not achieved by sub-licensing• Instead, there is a direct licence from the original
licensor
GPL v.2(Section 6)
Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions
GPL v.3(Section 10)
Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License.
© Bird & Bird LLP 2015Page 35
Distribution of unmodified copies of codeGPL v.2
(Section 1)
You may … distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that:
• you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty;
• keep intact all the notices that refer to this License and to the absence of any warranty; and
• give any other recipients of the Program a copy of this License along with the Program.
You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.
Key PointsSimilar to permissive licences, but with the addition that any distribution must be on the terms of the GPL itself.
© Bird & Bird LLP 2015Page 36
Distribution of modified copies of GPL code
Key Points• There is a clear right to modify the GPL code• The modified work must be licensed under the GPL terms• But confusing (and different) language being used here …
GPL v.2(Section 2)
You may modify your copy of the Program, thus forming a work based on the Program, and copy and distribute such modifications or work, provided that you also meet all of these conditions:
b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
© Bird & Bird LLP 2015Page 37
Scope of a "Work based on the program"
US copyright law recognises 2 distinct concepts:
Derivative works
"A work based upon one or more pre-existing works, such as a translation … or any other form in which a work may be recast, transformed or adapted."
Example:
A software program that has been enhanced from an earlier version
Collective works
"A work … in which a number of contributions, constituting separate and independent works in themselves, are assembled into a collective whole."
Example:
A set of separate office programs distributed on a single disc or in a single package
GPL v.2(Section 0)
a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language.
Does the GPL merge these 2 concepts?
© Bird & Bird LLP 2015Page 38
Scope of a "Work based on the program"
GPL v.2(Section 2)
• If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works.
• But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License ...
• In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.
Key Points• The first bullet is fairly obvious (except for underlined
words)• Intended relationship between second and third bullets
is not clear© Bird & Bird LLP 2015Page 39
What does the FSF say?What is the difference between an “aggregate” and other kinds of “modified versions”?
An “aggregate” consists of a number of separate programs, distributed together on the same CD-ROM or other media. Where's the line between two separate programs, and one program with two parts? This is a legal question, which ultimately judges will decide.
We believe that a proper criterion depends both on the mechanism of communication (exec, pipes, rpc, function calls within a shared address space, etc.) and the semantics of the communication (what kinds of information are interchanged).
If the modules are included in the same executable file, they are definitely combined in one program. ([i.e. static linking])
If modules are designed to run linked together in a shared address space, that almost surely means combining them into one program. ([i.e. dynamic linking])
By contrast, pipes, sockets and command-line arguments are communication mechanisms normally used between two separate programs. So when they are used for communication, the modules normally are separate programs.
But if the semantics of the communication are intimate enough, exchanging complex internal data structures, that too could be a basis to consider the two parts as combined into a larger program.
© Bird & Bird LLP 2015Page 40
Obligation to provide source code
GPL v.2(Section 3)
You may copy and distribute the Program (or a work based on it) in object code or executable form … provided that you also do one of the following:
• accompany it with the complete corresponding machine-readable source code … on a medium customarily used for software interchange; or,
• accompany it with a written offer … to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code.
Key Points• Applies to the original work and "a work based" on it • Obligation to provide a copy of the source code• Written offer to provide source code separately (at
minimal cost)
© Bird & Bird LLP 2015Page 41
Page 42© Bird & Bird LLP 2015
To “convey” a work means any kind of propagation that enables other parties to make or receive copies.
Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying.
A company is running a modified version of a GPL'ed program on a web site. Does the GPL say they must release their modified sources?
The GPL permits anyone to make a modified version and use it without ever distributing it to others. What this company is doing is a special case of that. Therefore, the company does not have to release the modified sources.
Does the provision of software on a SaaS basis trigger the GPL obligations?
GPL v2.0 GPL v3.0 Affero GPL v3.0Notwithstanding any other provision of this License, if you modify the Program, your modified version must prominently offer all users interacting with it remotely through a computer network … an opportunity to receive the Corresponding Source of your version.
"Distribution" is not defined in GPL v2.0.
GPL and the "SaaS loophole"
OSS imposes a number of requirements
DerivativeWorks
Distribution AggregationProceduralObligations
Aggregation
Mozilla Pubic Licence
You may create and distribute a Larger Work* under terms of Your choice, provided that You also comply with the requirements of this Licence for the Covered Software.
*Larger Work means a work which combines Covered Code or portions thereof with code not governed by the terms of this License
OSS imposes a number of requirements
© Bird & Bird LLP 2015Page 44
Thank you Tim Harris
Senior [email protected]
+44 (0)20 7905 6374
Bird & Bird LLP is a limited liability partnership, registered in England and Wales with registered number 0C340318 and is authorised and regulated by the Solicitors Regulation Authority. Its registered office and principal place of business is at 15 Fetter Lane, London EC4A 1JP. Bird & Bird is an international legal practice comprising Bird & Bird LLP and its affiliated and associated businesses and has offices in the
locations listed on our web site: twobirds.com. The word “partner” is used to refer to a member of Bird & Bird LLP or an employee or consultant, or to a partner, member, director, employee or consultant in any of its affiliated and associated businesses, who is a lawyer with
equivalent standing and qualifications. A list of members of Bird & Bird LLP, and of any non-members who are designated as partners and of their respective professional qualifications, is open to inspection at the above address.
www.twobirds.com