Foreword |
|
xvii | |
|
Abbreviations |
|
xix | |
Contributors |
|
xxv | |
|
|
xxxi | |
|
|
xxxvii | |
Introduction |
|
xliii | |
|
1 Open Source as Philosophy, Methodology, and Commerce: Using Law with Attitude |
|
|
1 | (33) |
|
|
|
1 | (1) |
|
1.2 The Legal Treatment of Software |
|
|
2 | (5) |
|
1.3 Open Source as Philosophy and Politics |
|
|
7 | (14) |
|
|
21 | (9) |
|
1.5 Open Source as Development Methodology |
|
|
30 | (1) |
|
1.6 Open Source as Commerce |
|
|
30 | (1) |
|
1.7 Enforcing Open Source |
|
|
31 | (1) |
|
|
32 | (1) |
|
|
32 | (2) |
|
2 Evolving Perspective on Community and Governance |
|
|
34 | (37) |
|
|
|
2.1 Collaboration and Communities |
|
|
34 | (1) |
|
2.2 Intellectual Assets to Intellectual Property |
|
|
35 | (1) |
|
2.3 Intellectual Property and Industrial Scale |
|
|
36 | (1) |
|
2.4 Early Experiments under Copyright |
|
|
36 | (1) |
|
2.5 The Start of an Engineering Economic Model |
|
|
37 | (2) |
|
2.6 Open Source as a Shared Production Model |
|
|
39 | (1) |
|
|
40 | (2) |
|
2.8 Licences to Facilitate Collaboration |
|
|
42 | (2) |
|
2.9 The Politics and Ethics of Open Source |
|
|
44 | (1) |
|
2.10 The Free Software Definition |
|
|
45 | (1) |
|
2.11 The Open Source Definition |
|
|
46 | (1) |
|
2.12 Open Source Initiative, a Pragmatic Community |
|
|
47 | (2) |
|
2.13 Pragmatism versus Ethics |
|
|
49 | (1) |
|
2.14 The Apache Software Foundation |
|
|
50 | (2) |
|
2.15 Governance of Open Source |
|
|
52 | (1) |
|
2.16 People versus Process |
|
|
53 | (1) |
|
2.17 The Benevolent Dictator Governance Model |
|
|
54 | (1) |
|
2.18 The Meritocratic Governance Model |
|
|
55 | (1) |
|
2.19 Implications of Licence Choice and IP Management on Governance Models |
|
|
56 | (2) |
|
2.20 The Rise of Codes of Conducts |
|
|
58 | (2) |
|
2.21 The Business of Open Source |
|
|
60 | (5) |
|
2.22 Open Source Non-Profits |
|
|
65 | (2) |
|
|
67 | (4) |
|
PART 1 INTELLECTUAL PROPERTY, CORPORATE, AND GOVERNANCE |
|
|
|
3 Copyright, Contract, and Licensing in Open Source |
|
|
71 | (42) |
|
|
3.1 Copyright and Software |
|
|
71 | (12) |
|
3.2 Forms of Open Source Licensing |
|
|
83 | (14) |
|
3.3 Software Interaction and Licence Compatibility |
|
|
97 | (5) |
|
3.4 Interpreting Open Source Licences: Contract or `Bare Licence'? |
|
|
102 | (5) |
|
3.5 What Makes a Software Licence `free' or `open source'? |
|
|
107 | (4) |
|
|
111 | (2) |
|
|
113 | (13) |
|
|
4.1 Project Licence Agreements |
|
|
113 | (1) |
|
4.2 Types of Inbound Agreements for Open Source Projects |
|
|
114 | (7) |
|
4.3 Employee Contributions |
|
|
121 | (2) |
|
|
123 | (3) |
|
|
126 | (15) |
|
|
|
126 | (2) |
|
5.2 What is Copyright Infringement and What Claims Can Be Made? |
|
|
128 | (1) |
|
5.3 Enforceability of Open Source Licences and Termination Provisions--How? |
|
|
129 | (2) |
|
5.4 Why is Copyright in Open Source so Consistendy Enforced in Germany? |
|
|
131 | (1) |
|
5.5 Who Can Enforce Copyright in Open Source? |
|
|
132 | (4) |
|
5.6 What Are the Key Arguments and Alleged Infringements? |
|
|
136 | (3) |
|
|
139 | (2) |
|
6 Transforming the Supply Chain with Openchain ISO5230 |
|
|
141 | (4) |
|
|
|
141 | (1) |
|
6.2 Compliance is a Process Challenge that Spans Multiple Organisations |
|
|
142 | (1) |
|
6.3 Because No Single Company Makes a Finished Device, No Single Company Can Solve Compliance Challenges |
|
|
142 | (1) |
|
6.4 The Best Solutions Are Often the Simplest, with the Lowest Barriers to Entry |
|
|
142 | (1) |
|
6.5 OpenChain ISO 5230 is Intended to Make Open Source Licence Compliance More Predictable, Understandable, and Efficient for the Software Supply Chain |
|
|
143 | (1) |
|
6.6 A Simple Specification that Explains the Key Requirements of a Quality Compliance Program |
|
|
143 | (1) |
|
6.7 A Clear and Free Way to Check Conformance with the Specification |
|
|
143 | (1) |
|
6.8 Reference Material to Support Conformance and with Broader Questions of Training and Processes |
|
|
144 | (1) |
|
6.9 Community and Support |
|
|
144 | (1) |
|
|
144 | (1) |
|
|
144 | (1) |
|
7 SPDX and Software Bill of Materials ISO/IEC 5962L 2021 |
|
|
145 | (19) |
|
|
7.1 Why Create a Software Bill of Materials? |
|
|
145 | (1) |
|
7.2 What is an SPDX Document? |
|
|
146 | (10) |
|
7.3 Listening to the Open Source Community Needs |
|
|
156 | (5) |
|
7.4 Tooling and Best Practices to Make it Easy for Developers |
|
|
161 | (1) |
|
7.5 Adoption of SPDX Documents |
|
|
161 | (1) |
|
|
162 | (2) |
|
8 Corporate Concerns: Audit, Valuation, and Deals |
|
|
164 | (19) |
|
|
|
164 | (2) |
|
8.2 Why Understanding Open Source is Important in the Corporate Context |
|
|
166 | (3) |
|
8.3 Open Source Audit Services |
|
|
169 | (3) |
|
|
172 | (2) |
|
8.5 Issues Arising on M&A |
|
|
174 | (4) |
|
8.6 Investment in Open Source Businesses |
|
|
178 | (2) |
|
|
180 | (1) |
|
|
181 | (2) |
|
|
183 | (30) |
|
|
|
183 | (1) |
|
|
184 | (14) |
|
9.3 Open Source Projects, Products, and Services |
|
|
198 | (3) |
|
9.4 The Community Role in Open Source Trademarks |
|
|
201 | (3) |
|
9.5 Lawful Use of Others' Trademarks |
|
|
204 | (4) |
|
9.6 Attempts to Limit Competition with Trademarks |
|
|
208 | (4) |
|
|
212 | (1) |
|
10 Patents and the Defensive Response |
|
|
213 | (43) |
|
|
|
10.1 Patents and Software |
|
|
213 | (4) |
|
10.2 Patents 101: Why Are Patents Relevant to Open Source? |
|
|
217 | (9) |
|
10.3 Patents and Open Source Interactions |
|
|
226 | (9) |
|
10.4 How Open Source Deals with Patents |
|
|
235 | (10) |
|
10.5 Patent Busting and Patent Pools |
|
|
245 | (4) |
|
10.6 Patent Litigations Initiated Against Open Source |
|
|
249 | (3) |
|
|
252 | (4) |
|
11 Open Source Software in Standard Setting: The Role of Intellectual Property Right Regimes |
|
|
256 | (17) |
|
|
|
|
|
256 | (2) |
|
11.2 Results from the Literature |
|
|
258 | (5) |
|
11.3 Insights from Case Studies and Stakeholder Consultation |
|
|
263 | (3) |
|
11.4 Compatibility of Intellectual Property Regimes in Standards Development Organisations and Open Source Software |
|
|
266 | (4) |
|
|
270 | (3) |
|
|
273 | (9) |
|
|
|
|
273 | (1) |
|
12.2 Export Control Checklist |
|
|
274 | (2) |
|
12.3 Case Study: Application of Export Control Regimes to Open Source in the US |
|
|
276 | (2) |
|
12.4 Survey of Export Control Regimes |
|
|
278 | (3) |
|
|
281 | (1) |
|
13 Open Source Software and Security: Practices, Governance, History, and Perceptions |
|
|
282 | (9) |
|
|
13.1 Open Source and Security: Myths and Reality |
|
|
282 | (4) |
|
13.2 Open Source Security Governance: Vulnerability Discovery, Patching, and Disclosure Practices |
|
|
286 | (5) |
|
PART 2 THE BUSINESS OF OPEN: ECONOMICS, OPEN SOURCE MODELS, AND USAGE |
|
|
|
14 Sustainability and Open Source |
|
|
291 | (7) |
|
|
14.1 From Human-Centred Design to Community-Centred Design |
|
|
292 | (1) |
|
14.2 The City of Amsterdam Case |
|
|
292 | (1) |
|
14.3 The Emissions Problem and the Role and Complexity of Supply Chains |
|
|
293 | (1) |
|
14.4 The Carbon-Negative Data Centre Blue Print |
|
|
294 | (2) |
|
14.5 UN Sustainable Development Goals and Open Data |
|
|
296 | (2) |
|
15 Economics of Open Source |
|
|
298 | (31) |
|
|
15.1 The Economics of Open Source |
|
|
299 | (1) |
|
15.2 Introduction: Open Source, Law, Politics, and Economics |
|
|
299 | (2) |
|
15.3 Why is Free Software Free? |
|
|
301 | (2) |
|
15.4 Software Freedom and Open Collaboration |
|
|
303 | (2) |
|
15.5 Differentiate or Collaborate! |
|
|
305 | (2) |
|
15.6 Joint Stewardship and Governance |
|
|
307 | (1) |
|
15.7 Contributions, Copyright, and Participation |
|
|
308 | (1) |
|
15.8 Communities, Contributors, and Merit |
|
|
309 | (3) |
|
15.9 Value at the Edge of the Commons |
|
|
312 | (2) |
|
15.10 Open Source-Related Products and Service |
|
|
314 | (3) |
|
15.11 The Benefits of Open Source in a Business Context |
|
|
317 | (2) |
|
15.12 Differentiating in the Eyes of the Consumer |
|
|
319 | (1) |
|
15.13 The Role of the Volunteer Community |
|
|
320 | (2) |
|
15.14 Competition in the Wider Open Source Community |
|
|
322 | (2) |
|
15.15 Compliance, Social and Market Transactions, and Zero Price |
|
|
324 | (2) |
|
15.16 Open Source as Community-Provisioned Public Good |
|
|
326 | (3) |
|
16 Business and Revenue Models and Commercial Agreements |
|
|
329 | (40) |
|
|
|
329 | (1) |
|
16.2 What is Open Source? |
|
|
330 | (6) |
|
16.3 Business Models and Open Source |
|
|
336 | (7) |
|
16.4 Commercial or Business Models |
|
|
343 | (8) |
|
16.5 Cloud and Open Source in the Last Few Years |
|
|
351 | (12) |
|
|
363 | (1) |
|
16.7 Open Source Business Models--Diversity and Success |
|
|
364 | (1) |
|
16.8 Measuring Success and the Values of Open Source |
|
|
364 | (1) |
|
16.9 Open Source and Commercial Contracts |
|
|
365 | (4) |
|
17 Antitrust, Competition, and Open Source |
|
|
369 | (16) |
|
|
|
369 | (1) |
|
17.2 Abuse of Dominant Position |
|
|
370 | (8) |
|
|
378 | (7) |
|
18 Foundations and Other Organisations |
|
|
385 | (10) |
|
|
18.1 Governance versus Foundations |
|
|
386 | (1) |
|
18.2 The No-Foundation Solution |
|
|
387 | (1) |
|
|
387 | (3) |
|
|
390 | (1) |
|
18.5 Aggregating Foundations--Fiscal Sponsors |
|
|
391 | (1) |
|
18.6 Corporate Initiatives |
|
|
391 | (1) |
|
18.7 A Note of Licensing and Foundations |
|
|
392 | (1) |
|
18.8 Co-option, Funding, and Confusion around Corporate Models |
|
|
392 | (2) |
|
18.9 Need for Organisational Diversity |
|
|
394 | (1) |
|
19 The Rise of the Open Source Program Offices (OSPO) |
|
|
395 | (13) |
|
|
|
395 | (1) |
|
19.2 Should You Start An Open Source Program Office (OSPO)? |
|
|
396 | (2) |
|
19.3 The Role of an OSPO, Model Options, and Where Should We Build It? |
|
|
398 | (4) |
|
19.3.1 Drilling down into OSPO's components |
|
|
400 | (2) |
|
19.4 How Did OSPOs Get Started and the What is the ToDo Group? |
|
|
402 | (1) |
|
19.5 What is the Impact of an OSPO on an Organisation? |
|
|
403 | (3) |
|
19.6 How to Get Started in Creating Your Own OSPO? |
|
|
406 | (1) |
|
19.7 Conclusion and Attributions |
|
|
407 | (1) |
|
20 Cloud Native Development, Containers, and Open Source Licensing |
|
|
408 | (21) |
|
|
20.1 Overview of Linux Containers |
|
|
408 | (2) |
|
20.2 Containers and the Scope of Copyleft |
|
|
410 | (6) |
|
20.3 Container Images and Source Code Compliance |
|
|
416 | (5) |
|
20.4 Identifying the Licence of a Container |
|
|
421 | (1) |
|
20.5 Containers and Network Services Copyleft |
|
|
422 | (2) |
|
20.6 The Rise of `Source-Available' Licences Targeting Cloud Service Providers |
|
|
424 | (5) |
|
21 Public Sector and Open Source |
|
|
429 | (42) |
|
|
|
|
429 | (1) |
|
21.2 The International Context--The WTO |
|
|
430 | (1) |
|
21.3 The European Procurement Law Context |
|
|
431 | (4) |
|
21.4 Issues in Software Procurement |
|
|
435 | (20) |
|
|
455 | (6) |
|
|
461 | (4) |
|
|
465 | (6) |
|
|
|
22 Blockchain and Open Source |
|
|
471 | (19) |
|
|
|
473 | (1) |
|
22.2 Protocols and Clients |
|
|
474 | (1) |
|
|
475 | (2) |
|
|
477 | (2) |
|
22.5 Bitcoin Client Licence Analysis |
|
|
479 | (2) |
|
22.6 Ethereum Client Licence History |
|
|
481 | (3) |
|
22.7 Ethereum Client Licence Analysis |
|
|
484 | (3) |
|
|
487 | (3) |
|
|
490 | (22) |
|
|
|
490 | (1) |
|
|
490 | (1) |
|
|
491 | (2) |
|
23.4 The Open Source Hardware Definition |
|
|
493 | (3) |
|
23.5 Hardware and Reciprocity (Copyleft)--Intellectual Property |
|
|
496 | (5) |
|
23.6 Hardware and Other Forms of Intellectual Property Right |
|
|
501 | (2) |
|
23.7 Specific Open Hardware Licences |
|
|
503 | (5) |
|
23.8 Non-copyleft Hardware Licences |
|
|
508 | (1) |
|
23.9 Open Source Hardware: Development Models |
|
|
508 | (3) |
|
|
511 | (1) |
|
|
512 | (27) |
|
|
24.1 Freedom to Use, Study, Modify, and Share |
|
|
514 | (2) |
|
|
516 | (1) |
|
|
516 | (1) |
|
24.4 Interrelationship Between Opens |
|
|
517 | (1) |
|
24.5 Openness and Intellectual Property Rights |
|
|
518 | (2) |
|
24.6 Definitions of Openness (and Freedom) in Software |
|
|
520 | (1) |
|
|
521 | (1) |
|
|
522 | (1) |
|
|
523 | (1) |
|
|
523 | (2) |
|
24.11 Other Documentation Licences |
|
|
525 | (1) |
|
24.12 Open Hardware (and Open Source Hardware) |
|
|
525 | (1) |
|
|
526 | (3) |
|
24.14 Open Software Services |
|
|
529 | (2) |
|
24.15 Open Pontics and Open Government |
|
|
531 | (1) |
|
24.16 Open Standards and Open Specifications |
|
|
532 | (3) |
|
|
535 | (1) |
|
24.18 Open Publishing, Open Education, and Open Access |
|
|
536 | (2) |
|
|
538 | (1) |
Appendix |
|
539 | (18) |
Index |
|
557 | |