someone forked skerry, renamed it, stripped my name, and sold support for it
Contents
a story from a few years back that still annoys me in a specific, instructive way. skerry is permissively licensed on purpose, you can do almost anything with it, including fork it. I knew that when I chose the license. so this is not a legal complaint. it is a story about the difference between what you are allowed to do and what you should do.
a consultancy took skerry, forked it, renamed it something close enough to cause confusion, deleted the attribution from the source headers (the one thing the license does require, so that part was an actual violation), slapped their logo on it, and started selling "enterprise support and hardening" for it to companies. the hardening was my code. the enterprise support was them emailing me the hard questions through a throwaway account, which I only worked out later when the phrasing matched their public docs word for word.
so I was maintaining the real thing for free, and a company was charging for support of a renamed copy, and funnelling the actual support work back to me, for free, via a fake account. that is almost impressive. a perfect little parasite.
what I did and did not do
- I did not start a brigade. this topic has a rule against it and it is a good rule, sending a mob at them would have made me the story.
- I did send a polite, firm email about the stripped attribution, which the license does require. they restored it quietly and never replied. cowards restore attribution fastest.
- I did NOT try to stop the fork itself. I chose a permissive license, forking is the deal, and if their fork had been honest I would have wished them luck.
- I did add a line to the README naming the real project and its home, because the confusion was the actual harm, not the fork.
the lesson, if there is one: a permissive license is a gift with exactly one string, keep my name on it. most people honour that. a few will take the gift, cut the string, and sell it back to the people it was free for. that is legal in spirit and sometimes a violation in the detail, and the only real defence is a community that knows where the real project lives. which, fourteen years in, mine does. nej to the parasites, though. they know who they are.
Get the best of #open_source_drama weekly
One email each Monday with the most useful posts. No spam; unsubscribe in one click.
Comments
Sign in to join the conversation.
Sign in to comment