Live data from Hacker News

Missing open-source contributor presents a dilemma when accepting their PR

bettersoftware.uk

11–20 of 73 posts

Re: Missing open-source contributor presents a dilemma when accepting their PR

#11
post #9
post #4

Earlier quoted context omitted.

Write your own what? Code? If so, it could be argued in court that you're still violating copyright, because you looked at the code beforehand. At least, that's what happens with anti-reverse-engineering clauses.

You’re allowed to describe how it works to someone else and have them write it. If you can write a full specification of the code without any code snippets, or write a full TDD test set, and hand it off to someone who can swear they’ve never looked at the source material, you can still pull off a clean-room copy. I had to do that for a small lib due to European copyright laws. They don’t like Public Domain. There’s s…

> You’re allowed to describe how it works to someone else and have them write it.

Couldn’t you get an LLM to do that? “Here’s the code for this function, add conditionals to fix any null pointer bugs”

Or: “Here’s a function and a unit test that exposes a bug in it, modify the function so the unit test passes”. With that approach, the LLM could even (autonomously) try multiple times until the test passed.

> I had to do that for a small lib due to European copyright laws. They don’t like Public Domain.

This shouldn’t be an issue for public domain dedications which contain a fallback copyright license such as CC0. [0] People say the Unlicense also falls in that category, but (unfortunately) its wording is less than completely clear, so it is debatable. Another option is “PD-equivalent licenses” such as 0BSD or MIT-0, which are technically copyright licenses but designed to give you the same rights as PD (e.g. reuse without requiring attribution). Now, what some random German judge is going to make of them, who knows.

[0] Although some people, e.g. Fedora, don’t like its clauses around patents

Re: Missing open-source contributor presents a dilemma when accepting their PR

#13
post #9

Earlier quoted context omitted.

You’re allowed to describe how it works to someone else and have them write it. If you can write a full specification of the code without any code snippets, or write a full TDD test set, and hand it off to someone who can swear they’ve never looked at the source material, you can still pull off a clean-room copy. I had to do that for a small lib due to European copyright laws. They don’t like Public Domain. There’s s…

> You’re allowed to describe how it works to someone else and have them write it. Couldn’t you get an LLM to do that? “Here’s the code for this function, add conditionals to fix any null pointer bugs” Or: “Here’s a function and a unit test that exposes a bug in it, modify the function so the unit test passes”. With that approach, the LLM could even (autonomously) try multiple times until the test passed. > I had to d…

When people pay $100 million for your product they expect to be fully indemnified. It was a pain in my ass but I can’t really blame them.

Re: Missing open-source contributor presents a dilemma when accepting their PR

#14
The author didn't link to the actual PR so I can't see the full context, but I don't see the point in setting up a bot to make contributors agree to copyright terms if the maintainers just ignore it when someone does a PR and then doesn't engage with the bot. It seems like a waste of time for all parties.

Re: Missing open-source contributor presents a dilemma when accepting their PR

#15
post #14

The author didn't link to the actual PR so I can't see the full context, but I don't see the point in setting up a bot to make contributors agree to copyright terms if the maintainers just ignore it when someone does a PR and then doesn't engage with the bot. It seems like a waste of time for all parties.

I think it might be this one: https://github.com/spectreconsole/spectre.console/pull/991

though, it's dealing with a zero input rather than null

Re: Missing open-source contributor presents a dilemma when accepting their PR

#16
I don't like them and won't contribute to projects with them but isn't this the exact point of a CLA[1]? A textfile in the repo seems a lot easier to track and audit than PR comments and a bot to chase people.

1. https://en.m.wikipedia.org/wiki/Contributor_License_Agreemen...

Re: Missing open-source contributor presents a dilemma when accepting their PR

#17
"Whenever you add Content to a repository containing notice of a license, you license that Content under the same terms, and you agree that you have the right to license that Content under those terms. If you have a separate agreement to license that Content under different terms, such as a contributor license agreement, that agreement will supersede."

https://docs.github.com/en/site-policy/github-terms/github-t...

Re: Missing open-source contributor presents a dilemma when accepting their PR

#18
From a logical standpoint, if someone makes a pull request to an open source project, it should be safe to assume they are ok with it being distributed under the current license of the project they are contributing to.

But copyright law isn't always logical.

Re: Missing open-source contributor presents a dilemma when accepting their PR

#19
post #12

It's interesting that the workflow would allow submitting a PR without consenting to terms. Nearly every website or app today makes you agree to terms right at the start.

Technically, to get that far you have to accept GitHub’s ToS, which does have terms (linked elsewhere here) that contributions are assumed to have the license of the repo unless otherwise noted.
Post reply on HN