The Apache Foundation has declared that none of its new software projects can include Facebook’s booby-trapped BSD-licensed code.
The foundation’s legal affairs director, Chris Mattmann, said over the weekend that libraries, frameworks and tools covered by Facebook’s open-source-ish BSD-plus-Patents license should not be absorbed into any new projects.
“No new project, sub-project or codebase, which has not used Facebook BSD+Patents licensed jars (or similar), are allowed to use them,” Mattmann wrote. “In other words, if you haven’t been using them, you aren’t allowed to start. It is Cat‑X.”
The Cat‑X or “Category X” classification means a library is not allowed to be included with any Apache product.
Additionally, he said, any existing projects that rely on the BSD+Patents licensed libraries will have until August 31 to get rid of Facebook’s code and find a suitable replacement that has been approved by the foundation.
The move stems from concerns over the terms in Facebook’s customized agreement with coders. That BSD-plus-Patents license includes provisions that mean if you, directly or indirectly, accuse Facebook of patent infringement, you lose the right to use and distribute Facebook’s code. If you sue someone else for patent infringement in a way that involves Facebook’s code, you also lose your rights to the code.