A license incompatibility in an extensively used open source (opens in new tab) library has led to breaking the popular web development (opens in new tab) framework Ruby on Rails (RoR).
A developer pointed out his GPLv2 licensed code was being improperly used inside a MIT licensed Ruby library called mimemagic. The issue was quickly sorted by re-releasing mimemagic as GPLv2. To prevent further misuse mimemagic’s developer also yanked the older MIT licensed releases of the library.
This however had the unfortunate side-effect of breaking not just the RoR framework but also snowballed to impact thousands of repositories that depended on the older MIT licensed version of mimemagic.
- We've assembled a list of the best laptops for programming (opens in new tab)
- These are the best Linux distros for developers (opens in new tab)
- Check our list of the best text editors (opens in new tab)
Off the rails
According to mimemagic’s GitHub insights, the library is used by 172 packages and over 577,000 repositories.
In a discussion on GitHub, a developer cited these numbers and suggested the older MIT licensed versions of mimemagic to be brought back. This however didn’t pass muster with the developer of mimemagic, who suggested they just work with the RoR team to get to an amicable solution.
The bigger issue however is that larger projects that use mimemagic for its permissive license will have to consider the implications of incorporating the more restrictive GPL code in their projects. The move will mean that many projects will have to change the licensing of their projects, which might not be feasible for some.
“Since so many applications are authored using Rails under the assumption that those applications are not copyleft under the GPL, it is likely that a great many of those apps would not be complying with the terms of the GPL since they were not deployed with those terms in mind,” summarized open-source licensing consultant Paul Berg to The Register.
Resolving the issue will take quite a lot of effort, and it’ll have a lasting impact on thousands of projects given the popularity of the RoR framework.
- Subscribe to Linux Format magazine (opens in new tab) for more Linux and open source goodness
Via: The Register (opens in new tab)