[eproxus]

Yeah, that page is horrendous and looks super sketchy. It looks like a very professional fishing attempt to get unsuspecting developers to download malware.

They have a lot of obviously fake quotes from non-existent people at positions that don’t even mention what company it is. The pictures are misgendered and even contain pictures of kids.

Feels like the whole page is AI generated.

[runiq]

They have a CLA that assigns copyright to them: https://github.com/rustfs/rustfs/blob/5b0a3a07645364d998e3f5...

So, arguably worse than MinIO.

[everfrustrated]

The _only_ reason to require a CLA is because you expect to change the license in the future. RustFS has rug-pull written all over it.

[regularfry]

Or to offer it under a commercial licence in parallel.

[Jon_Lowtek]

While that is the most common use case for CLAs, it is normally done by contributors granting a very permissive, but not exclusive, license to a legal entity like a company or foundation, in addition to the public license granted to everyone.

This is not that. This is not even a license. They want a full transfer of intellectual property ownership. Sure that enables them to use it in a commercial product, but it also enables them to sue if contributors contribute similarly to other projects. Obviously that would create a shit storm, and there is an exception with the public license, but riddle me this: can you legally make similar contributions to multiple projects that have this type of CLA?

Let us take a step back and instead look where such terms are more common: employment contracts.

[runiq]

That doesn't require full copyright assignment, though, right?

[jen20]

Obviously this is not the only reason - even the Free Software Foundation require IP assignment via a CLA.

Whether you can or will sign one is a different matter (I will not).

[stormking]

How would you run a project like this? People come and go. People do a one-time contribution and then you never hear from them again. People work on a project for years and then just go silent. Honestly, credit where credit is due, but how is a project like this supposed to manage this?

[PunchyHamster]

You can have CLA without assigning copyright to the project.

You don't need assignment to the project if you are not planning to change project's license.

You do need assignment to the project if you need to ever rugpull the community and close the code

[speedgoose]

You could pick a license and not plan to relicense later. Like Linux.

[runiq]

What do you mean by 'manage?' In your mind, what are you planning to do in the future that you need my full copyright as a change owner?

[victormy]

Without a valid CLA and a strong core team, you often end up with fragmentation or legal deadlock. Even the ASF isn't a silver bullet—projects without strong leadership die there all the time. The CLA exists to prevent that friction.

[runiq]

Then it's not the CLA that ensures project survivability. It's the strong core team you mentioned.

[EgoIncarnate]

MinIO had a de facto CLA. MinIO required contributors to license their code to the project maintainers (only) under Apache 2. Not as bad as copyright assignment, but still asymmetric (they can relicense for commercial use, but you only get AGPL). https://github.com/minio/minio/blob/master/.github/PULL_REQU...

[yencabulator]

That's so weird. Your contribution is a derived work based on AGPL, so it must be AGPL...

The number of weird incompetent things the Minio people have done is surprisingly high.