Contributor License Agreement

From HandWiki
Short description: Copyright terms

A Contributor License Agreement (CLA) defines the terms under which intellectual property has been contributed to a company/project, typically software under an open source license.

Rationale

CLAs can be used to enable vendors to easily pursue legal resolution in the case of copyright disputes,[1] or to relicense products to which contributions have been received from third parties.[2] CLAs are important especially for corporate open source projects under a copyleft license, since without a CLA the contribution would restrict the guardian as well.

The purpose of a CLA is to ensure that the guardian of a project's outputs has the necessary ownership or grants of rights over all contributions to allow them to distribute under the chosen license, often by granting an irrevocable license to allow the project maintainer to use the contribution; if copyright is actually transferred, the agreement is more normally known as a Copyright Transfer Agreement. CLAs also have roles in raising awareness of IPR issues within a project.[3]

Relicensing controversy

When a CLA requires a contributor to assign unrestricted republishing rights to the project, contributed code can be relicensed at the discretion of the project, even when the CLA does not assign copyright to the project. Prominent open source advocates regard CLAs as dangerous to open source rights.[4]

Examples

In 2019 MongoDB used these rights granted by its CLA to achieve a move to a non-open-source license.[5]

In January 2021, the Elasticsearch project used such rights to move the project to a non-open-source license [6] arguing Amazon had been "misleading and confusing the community".

[...] Our license change is aimed at preventing companies from taking our Elasticsearch and Kibana products and providing them directly as a service without collaborating with us.

Our license change comes after years of what we believe to be Amazon/AWS misleading and confusing the community - enough is enough.

We’ve tried every avenue available including going through the courts, but with AWS’s ongoing behavior, we have decided to change our license so that we can focus on building products and innovating rather than litigating [...] [7]

Drew DeVault, a lead developer with a number of open source projects such as sway, regards this move as a loophole. Both these projects were licensed under a copyleft license, which uses copyright to protect contributions, yet the CLA negates the usefulness of copyright in achieving this protection:

Elasticsearch belongs to its 1,573 contributors, who retain their copyright, and granted Elastic a license to distribute their work without restriction. This is the loophole which Elastic exploited when they decided that Elasticsearch would no longer be open source [...][8]

CLAs which restrict relicensing

Project Harmony

Project Harmony was established by Canonical in 2010 to optionally avoid the problems discussed above. It provides a CLA template-builder. Based on choices made, the CLA will allow the contributor to keep copyright and assign rights to the project (as above) but with various restrictions on relicensing: using the template requires choosing one of the mutually-exclusive options, which range in restrictiveness.[9] A real-world example is the Ubuntu project. The CLA leaves copyright with the contributor and allows the project to relicense the code but with a restriction based on the license the contribution was made under:

2.3 Outbound License Based on the grant of rights in Sections 2.1 and 2.2, if We include Your Contribution in a Material, We may license the Contribution under any license, including copyleft, permissive, commercial, or proprietary licenses. As a condition on the exercise of this right, We agree to also license the Contribution under the terms of the license or licenses which We are using for the Material on the Submission Date.[10]

Fedora

The Fedora Project formerly required contributors to sign a CLA, either as an organization or as an individual.[11] However, this was retired in 2011[12] and instead contributors must agree to the Fedora Project Contributor Agreement, which is not a license agreement and does not include assignment of copyright.

Users

Companies and projects that use CLAs include:

KDE

KDE uses Free Software Foundation Europe's Fiduciary Licence Agreement[48] of which (FLA-1.2) states in section 3.3:

FSFE shall only exercise the granted rights and licences in accordance with the principles of Free Software as defined by the Free Software Foundations. FSFE guarantees to use the rights and licences transferred in strict accordance with the regulations imposed by Free Software licences, including, but not limited to, the GNU General Public Licence (GPL) or the GNU Lesser General Public Licence (LGPL) respectively. In the event FSFE violates the principles of Free Software, all granted rights and licences shall automatically return to the Beneficiary and the licences granted hereunder shall be terminated and expire.[49]


However, it is optional and every contributor is allowed not to assign their copyright to KDE e.V.

See also

References

  1. "Licenses". http://www.apache.org/licenses/. 
  2. "Contributing FAQ". http://forge.mysql.com/wiki/ContributingFAQ. 
  3. "Contributor Licence Agreements". Oss-watch.ac.uk. http://www.oss-watch.ac.uk/resources/cla.xml. 
  4. comments, 28 Feb 2019 Richard FontanaFeed 291up 2. "Why CLAs aren't good for open source" (in en). https://opensource.com/article/19/2/cla-problems. 
  5. Corbet, Jonathan (2018-10-18). "Making the GPL more scary". https://lwn.net/Articles/768670/. 
  6. "Upcoming licensing changes to Elasticsearch and Kibana". 2021-01-14. https://www.elastic.co/blog/licensing-change. 
  7. "Amazon: NOT OK - why we had to change Elastic licensing". 2021-01-14. https://www.elastic.co/blog/why-license-change-aws. 
  8. DeVault, Drew (2021-01-19). "Elasticsearch does not belong to Elastic". https://drewdevault.com/2021/01/19/Elasticsearch-does-not-belong-to-Elastic.html. 
  9. "Guide to the CAs | Harmony Agreements". http://harmonyagreements.org/guide.html. 
  10. "Contributor agreement form | Contributors" (in en). https://ubuntu.com/legal/contributors/agreement. 
  11. "Legal:Licenses/CLA - Fedora Project Wiki". https://fedoraproject.org/wiki/Legal:Licenses/CLA. 
  12. "Meeting:Board meeting 2011-04-05 - Fedora Project Wiki". https://fedoraproject.org/wiki/Meeting:Board_meeting_2011-04-05#FPCA_Update. 
  13. "Contribution License Agreement". .NET Foundation.org. http://cla.dotnetfoundation.org/. 
  14. "Licenses". Apache.org. http://www.apache.org/licenses/#clas. 
  15. "Canonical Contributor license agreement". Canonical.com. http://www.canonical.com/contributors. 
  16. "Clojure - Contributor Agreement". https://clojure.org/dev/contributor_agreement. 
  17. "CNCF Linux Foundation ID CLA signing FAQ". https://identity.linuxfoundation.org/projects/cncf. 
  18. "Individual Contributor License Grant". CyanogenMod. http://review.cyanogenmod.org/static/cla_individual.html. 
  19. "diaspora/diaspora · GitHub". Github.com. https://github.com/diaspora/diaspora. 
  20. "Legal Aspects". Qt Project. https://qt-project.org/legal.html. 
  21. http://www.discourse.org/cla
  22. "Contributor License Agreements | Django". Djangoproject.com. http://www.djangoproject.com/foundation/cla/. 
  23. "CLA". The Dojo Foundation. http://dojofoundation.org/about/cla. 
  24. "SeLion : Individual Contributor License Agreement (CLA)". https://docs.google.com/forms/d/1t_Rqly6-qVP536O8ESltIRCHM0qBsmahWUdJda0oo3U/viewform. 
  25. "LIST OF SUBSIDIARIES AS OF DECEMBER 31, 2014". https://www.sec.gov/Archives/edgar/data/1065088/000106508815000054/ebay123114_10-kex2101.htm. 
  26. "Eclipse Foundation Contributor License Agreement". Eclipse.org. 2013-06-17. http://www.eclipse.org/legal/CLA.php. 
  27. "Contributor Agreement Elastic". elastic.co. https://www.elastic.co/contributor-agreement. 
  28. "Contributing to Facebook Projects". facebook.com. https://code.facebook.com/cla. 
  29. "CONTRIBUTORS - The Go Programming Language". Golang.org. http://golang.org/CONTRIBUTORS. 
  30. "Google Individual Contributor License Agreement, v1.1". Google Inc.. https://developers.google.com/open-source/cla/individual?csw=1. 
  31. Hashicorp. ""Contributor License Agreement"". Hashicorp: Infrastructure Enables Innovation. https://www.hashicorp.com/cla. 
  32. "InfluxDB Contributor License Agreement". http://influxdb.com/community/cla.html. 
  33. "Contribute". Developer.joomla.org. http://developer.joomla.org/contributor-agreements.html. 
  34. jQuery Foundation - jquery.org. "jQuery Foundation Contributor License Agreement | Contribute to jQuery". Contribute.jquery.org. http://contribute.jquery.org/CLA/. 
  35. Cloud Native Computing Foundation. "Kubernetes CLA". CNCF. https://github.com/kubernetes/community/blob/master/CLA.md. 
  36. GitHub - openbmc/docs, openbmc, 2019-02-20, https://github.com/openbmc/docs, retrieved 2019-02-21 
  37. "Contributing to the PSF". Python Software Foundation. https://www.python.org/psf/contrib/. 
  38. "Contributing to Meteor". Contribute.meteor.com. https://contribute.meteor.com/. 
  39. "Contributing to Microsoft Visual Studio Code". Microsoft. https://github.com/Microsoft/vscode/wiki/Contributor-License-Agreement. 
  40. "Contributor License Agreement | MuseScore". https://musescore.org/en/cla. 
  41. "Contributor Agreement". OpenMediaVault. http://openmediavault.org/contributoragreement.html. 
  42. "OpenStack Contributors License Agreement". OpenStack. https://wiki.openstack.org/wiki/How_To_Contribute#Contributors_License_Agreement. 
  43. "Puppet Contributor License Agreement". https://cla.puppet.com/cla-text. 
  44. "Salesforce Contributor License Agreement". https://cla.salesforce.com/status/salesforce/observable-membrane/pull/48. 
  45. "CONTRIBUTOR LICENSE AGREEMENT". 2023-04-26. https://oss-cla.sangoma.com/asterisk/asterisk. 
  46. "License". 19 December 2022. https://en.wikipedia.org/wiki/TiddlyWiki#License. 
  47. "TLDR-pages/TLDR". 26 February 2022. https://github.com/tldr-pages/tldr/blob/master/CONTRIBUTING.md. 
  48. "FSFE welcomes KDE's adoption of the Fiduciary Licence Agreement (FLA)". 2008-08-22. http://ev.kde.org/announcements/2008-08-22-fsfe-welcomes-fla.php. 
  49. "Fiduciary Licence Agreement (Version 1.2)". http://www.fsfe.org/projects/ftf/FLA.en.pdf. 

External links