I am real mad about the Elastic relicense so I'm going to vent a bit.

Say that I contributed some code to Elastic, under the original open source license. That license defines the terms of our engagement. Me: "hey I improved your code, can you include this fix so I and everyone can use it?" Elastic: "sure!"
They require a CLA, which assigns ownership of my fix to the project steward. The idealistic reason to do this is to protect the long-term health of the project: if copyright law gets totally rewritten, we can update the license to reflect our original intent!
But this also requires me to trust in the steward organization to do the right thing. As the copyright holder on the project, I gave them the power to update the license to *anything* they want. Which, in this case, Elastic did.
Elastic didn't pick another open source license, which would provide the same guarantees for how I can use, contribute to, and redistribute the software. No, instead they said "thanks for contributing, your code is proprietary now, f off so we can make more money"
As a consequence of signing their CLA, I can no longer use MY OWN GODDAMNED CODE in their future releases however I want. I've signed my rights away.
By using an open source license and accepting contributions, they asked the community to trust them with their CLA. Implicitly: not just at the time the public made contributions, but for the life of the project! Instead they chose to set that trust, and their community, on fire.
I don't care if you use a proprietary license. You've been clear about your intent. I can make an informed choice not to work with you.

Replacing a FOSS license with a proprietary one is a violation of trust and a giant "fuck you" to everyone who worked with you in good faith.
This is why I won't contribute projects that require a CLA without community governance. If there isn't a CLA, the project can't change the license unilaterally and must continue to honour the original terms of my engagement.
I give away my code for free so *everyone* can use it for free... for better or for worse.

Elastic: If you're going to exploit people, you could at least pay them for their contributions. I hear you have a 14B market cap. 🙄
to conclude.....
To give you an idea of the approx. number of non-(elastic employee) contributors affected by this:

$ git clone [email protected]:elastic/elasticsearch.git && cd elasticsearch
$ git log -- . ':!x-pack' | grep Author | sort -u | egrep -v 'elastic\.co|elasticsearch\.com' | wc -l
1676

More from For later read

I should mention, this is why I keep talking about this. Because I know so many people who legally CAN'T.

How do I know they have NDAs, if they can't talk legally about them? Because they trusted me with their secrets... after I said something. That's how they knew I was safe.


Some of the people who have reached out to me privately have been sitting with the pain of what happened to them and the regret that they signed for YEARS. But at the time, it didn't seem like they had any other option BUT to sign.

I do not blame *anyone* for signing an NDA, especially when it's attached to a financial lifeline. When you feel like your family's wellbeing is at stake, you'll do anything -- even sign away your own voice -- to provide for them. That's not a "choice"; that's survival.

And yes, many of the people whose stories I now know were pressured into signing an NDA by my husband's ex-employer. Some of whom I *never* would have guessed. People I thought "left well." Turns out, they've just been *very* good at abiding by the terms of their NDA.

(And others who have reached out had similar experiences with other Christian orgs. Turns out abuse, and the use of NDAs to cover up that abuse, is rampant in a LOT of places.)

You May Also Like