We have been working recently on getting
a much higher percentage of OpenNTF submissions into the Catalog – as
we push for more high quality OpenNTF projects.
Getting a project listed in the Apache
or GPL Catalog means that:
- the authors contributions are licensed
to OpenNTF under an ICLA or CCLA (this is now required for any OpenNTF
contribution);
- any third party code is listed, and
that the licenses are compatible;
- that we inform the US government of
any encryption code. (legal requirement);
- the project code is functional and
that there is sufficient documentation.
So, as IP Manager, I have been scanning
all the projects that have been submitted since January 1, 2011. When
I find problems, such as code taken from some website without a clear license,
or an encrypted nsf, or a Notice file that does not list all the 3rd party
code in the submission – I send an email to the author requesting that
it be fixed.
In only a few cases will we actually
pull the code off the site. This might happen when there is a clear license
incompatibility (such as using GPL code in an Apache project), or if the
source code has not made available.
We are working on the website to clarify
when projects are in the Catalog. Currently, the project and release
pages have an “In Catalog” line – but due to a bug, the answer seems
to be nearly always “no”. We are working on fixing that – and
the answer for the vast majority of 2011 submissions will soon be “yes”.
So you will have some assurance that reasonable checks have been
done to check for IP issues.
I'll post further updates as we move
forward on making OpenNTF a site for trusted software.