Hacker News new | ask | show | jobs
by svalorzen 1723 days ago
Every time there is a post like this I go check the license of the original project. Invariably, it is MIT. I think this is probably indicative of something, although I couldn't say what.
4 comments

It's probably indicative of the fact that MIT is the de-facto default license in the JS ecosystem. It's not like other licenses require much more of forks than MIT does.
Everything in the npm ecosystem pretty much has to be MIT, or none of it would work.

You could poison most of the web dev ecosystem by changing the license on a handful of packages to GPL...

The GPL wouldn't affect server-side JS (you'd need the AGPL for that), but client-side JS would have to be released under the GPL in un-minified form.
Why? You could use GPL package in MIT licensed library.
Yes and then anyone using said library would have to open source their work.
I think it's likely indicative of the fact that the JS ecosystem doesn't really understand the meaning of open source (or the distinction between "open source" and free/libre software).

The author's comments are quite enlightening of their incomplete understanding of the licenses they use:

> nanocolors implementation and API are the same as

> Colorette. You essentially pirated my work.

After using a license that explicitly allows others to take their work, it's suprising the author thinks that someone "pirated" their work.

Hopefully this signals the start of an awakening within the JS ecosystem, with more and more developers switching to licenses like the GPL that actually respect the developers.

> After using a license that explicitly allows others to take their work, it's suprising the author thinks that someone "pirated" their work.

He stripped the license when he created his fork. (Only adding it after the thread on Twitter became actively noticed).

How is that _not_ pirating?

For libraries it is very difficult to chose a permissive license. Most companies have a whitelist for licenses for libraries they are allowed to use. And for a good reason. This is mostly MIT, BSD and Apache.

If you use a gpl licensed library in your project, it essentially becomes gpl licensed too. If you ever want to sell your software, this is probably a big no-no. It will become quite challenging, and could end up in a legal desaster.

So to create a successful library, other people are willing to use, you essentially have to release it without restrictions.

What about LGPL which is quite explicitly designed for libraries?
This could work, but it's just annoying. You'd have to modify your build process to serve this library separately instead of including it in your main bundle and then doing some code splitting.
the work being pirated is not the code but its place in the library marketplace, the license played a minimal role here (as it was infringed anyway)
What exactly would be different here if the project was under GPL?
I was going to say this.

IIRC, the MIT license does not require attribution (EDIT: it does)

Most people do not understand the philosophy of Open Source. It's not "hey look at me, I made this, look at me".

They should not give liberties to other people if they don't want them to use it.

EDIT: Seeing the comments to this one, this should be seen as a proof of Cunningham's Law[1]

  [1] - https://meta.wikimedia.org/wiki/Cunningham%27s_Law
It's literally three lines of actual content. It would not take you long to read it.

The MIT License (MIT)

Copyright © 2021 <copyright holders>

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

He was violating the license until 19 hours ago: https://github.com/ai/nanocolors/commit/1d86f02ca751ad8c113c...

The MIT license is a bad license but in this case the terms of it were clearly being violated by a hostile actor.

They aren’t using the commit you referenced. Instead they went down this path where there is one license, with one copyright (new author), but they are citing the other work in the copyrights: https://github.com/ai/nanocolors/pull/15/commits/182c767583b...
No need to be condescending with phrasing like "It would not take you long to read it".
That was necessary to demonstrate that there was no need to falsely recall it. You could just read it. It's three lines, takes about thirty seconds to read carefully, and would have saved you the trouble of posting misinformation.
It was not necessary. I would have (and I did) edit my comment to rectify my error.

I did not claim I was "sure", which is the point of "IIRC". Calling this misinformation is a bit exaggerated.

You can choose to be kind.

You can also choose to read up on essential facts before posting. When people send me emails that require me to go out of my way to interpret and understand because they withheld easily accessible information (usually because of their laziness to type) I answer with a "?" and remove the email.

IIRC isn't necessary when the content is clearly and easily accessible for you to read, I would prefer to not have to read comments based on vague memory when the facts are right there. This is netiquette.

it wasn’t necessary, but as a bystander I enjoyed it :)
You should really read the MIT license text again. It's 3 paragraphs...

They're also not saying that they weren't allowed to fork it. Just that it was an asshole move, and in community efforts that matters too. The exact same thing could happen with a GPL project, no difference license-wise.

From the MIT license:

"The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software."

It clearly requires attribution.