Apache says 'no' to Facebook code libraries
Anti-patent-lawsuit restrictions land tools on banned list
The Apache Foundation has declared that none of its new software projects can include Facebook's booby-trapped BSD-licensed code.
The foundation's legal affairs director, Chris Mattmann, said over the weekend that libraries, frameworks and tools covered by Facebook's open-source-ish BSD-plus-Patents license should not be absorbed into any new projects.
"No new project, sub-project or codebase, which has not used Facebook BSD+Patents licensed jars (or similar), are allowed to use them," Mattmann wrote. "In other words, if you haven't been using them, you aren't allowed to start. It is Cat‑X."
The Cat‑X or "Category X" classification means a library is not allowed to be included with any Apache product.
Additionally, he said, any existing projects that rely on the BSD+Patents licensed libraries will have until August 31 to get rid of Facebook's code and find a suitable replacement that has been approved by the foundation.
The move stems from concerns over the terms in Facebook's customized agreement with coders. That BSD-plus-Patents license includes provisions that mean if you, directly or indirectly, accuse Facebook of patent infringement, you lose the right to use and distribute Facebook's code. If you sue someone else for patent infringement in a way that involves Facebook's code, you also lose your rights to the code.
Facebook has insisted that the license was not written to stop any software from competing with its own, and that the terms do not apply to patent infringement suits "unless your patent counterclaim is related to Facebook's software licensed under the Facebook BSD+Patents license."
It's worth noting that the GNU GPL in its various forms are also on Apache's Cat-X list. ®
Sponsored: Becoming a Pragmatic Security Leader