How well do you know your open source licensing?
Choosing components with appropriate licenses is critical to ensuring you realize the benefits and avoid the risks when developing with open source components. But, how well do you know your licenses?
- Can you describe the differences between permissive, weakly protective and copyleft licenses?
- Do you understand the ramifications of including copyleft licensed components in your commercial applications?
- Do you know how component dependencies affect your application’s licensing?
If you want to brush up on your knowledge, please check out our short paper on open source licensing available here.
Tips for Increasing Open Source Benefits– Tips #1 and #2
With our launch of Insight, we’ve been talking to a lot of customers and prospective customers about effective management of open source-based development. At this point, we’ve heard it all. But some trends have emerged. One thing is clear — virtually everyone wants to use more open source in their development processs, but realizes the need to effectively manage its use. With thousands of components in use across their organizations, many people struggle with where to start. With this in mind, we’ve put together a ‘top 10 list” to get things started. You’ll find a summary of the entire list here.
We’ll be exploring each item in more depth through a series of five blog posts. But for now, let’s start at the beginning with understanding your current usage of open source components. (more…)
Avoid Lawyers — Track Your Licenses
As someone who has been through the process of supporting litigation I want to share my experience so that you understand what could happen when your organization incorporates OSS components under the wrong license or deals with code of questionable provenance. I’m writing this blog entry to convey the experience of being a developer who has to support litigation – it isn’t fun or productive, and it usually something that is completely avoidable.
(more…)Publishing Your Artifacts to the Central Repository
Sonatype makes it easy to add your projects to the Central Repository with a free, public hosting service called OSSRH. We first blogged about this back in 2009, but given the growth in the community, we thought some of you may not have seen that post, so we decided to update it. (more…)
Answers to your Questions about Insight
We want to thank everyone that attended the webinar on Thursday, October 6 titled Open Source Goodness – Potential Risks = Insight. Unfortunately we didn’t have time to answer all the great questions during the event, so we’ve answered them here for everyone’s benefit. If you missed the webinar, you can register to view a replay here. (more…)
