Linux.com

Feature: News

GPLv3, one year later

By Bruce Byfield on June 27, 2008 (7:00:00 PM)

Share    Print    Comments   

After 18 months of widespread consultation with community and corporate interests, the third versions of the GNU General Public License (GPL) and GNU Lesser General Public License (LGPL) were released one year ago on 29 June 2007. In November, they were joined by the GNU Affero General Public License (AGPL). Looking back at these licenses today, observers of free and open source software (FOSS) judge them a modest success, and credit them with continuing to educate people about free software.

Figures on adoption of the GPL family vary somewhat, depending on whom you talk to. According to Doug Levin, president and CEO of Black Duck Software, a company that tracks open source code, 2,476 projects are now using the third version of the GPL, 358 are using the LGPL, and 72 the AGPL. Theresa Bui, vice president of marketing for Palamida, a firm with a similar mission, gives roughly similar figures of 2,271 for the GPL, 261 for the LGPL, and 100 for the AGPL. The difference in the figures is probably explained by the fact that Black Duck's figures include planned transitions to the licenses, while Palamida's does not. Palamida's higher figures for the AGPL are probably due to Palamida's recent interest in the license, as evidenced by its blog.

In addition, Palamida tracks figures for projects that use a version of the GPL that contain a clause allowing contributors to use version 2.1 or later of the license (which includes, of course, version 3.0). These figures are 6,467 for the GPL and 372 for the LGPL. Since the AGPL was not in widespread use until the third version, it is not included in these figures.

Despite the difference in figures, both Black Duck and Palamida agree on the overall trends. Both agree that, taking all versions and variants of the GPL as a single unit, they account for about 70% of all the free licenses in use. Moreover, both agree that the adoption rate for the third versions of the GPL and LGPL remain steady at about 220 per month, and that this growth does not seem to have come at the expense of the second versions. Both expect these trends to continue with little change for the rest of 2008. Neither expects the third versions to overtake the second ones any time soon.

The major difference in adoption rates comes with the AGPL. Levin is cautious about talking about trends with AGPL, pointing out that it has only been out for six months. He says only that "there has been some pick up on the adoption of the AGPL." By contrast, Bui says that AGPL adoption "is really starting to take off." She predicts another 50 projects will be using the license by August, and describes this estimate as "incredibly conservative." She goes on to say that the AGPL is causing far more excitement than the latest versions of the GPL or LGPL, most likely because it received less attention in the consulting process that produced the third versions, and therefore came as more of a surprise.

By contrast, Bui says that the slow but steady adoption rates of the GPL and LGPL third versions was predictable. Instead of rushing to switch to the newest licenses, she says, "Software projects have been just chugging along in their old, familiar lifecycles, and, when new versions were ready, they converted to GPLv3."

One noticeable trend in adoption of the third versions is that projects and companies that opposed them or were neutral during the consultation process do not seem to have changed their minds. "It seems that people who had significant qualms about it a year ago haven't moved from them," says Bui. As a result, while some prominent companies and projects have moved to the third versions, including SugarCRM, Sun Microsystems, and OpenOffice.org, others, equally influential, have not, including the Linux kernel and MySQL.

The outspoken resistance by Linux kernel developers that was so highlighted during the consultation process may be slowing the adoption rate. "The fact that the kernel has not adopted GPLv3 is a significant part of any group's decision not to adopt," says Bui.

Still, both Bui and Levin see the third generation of the GPL family as being steady, if unspectacularly successful. "We see no signs of trends increasing or decreasing for the rest of the year," says Bui. As for the second generation, she predicts that "it will not, in the next two years, lose its position as the number one license."

Similarly, Levin says, "I believe that the GPL will have an average increase of about 10% per month over the next year. What that means is that there will be some 6,000 projects using the licenses a year from now. It will continue to grow and continue to be a factor in the mix of licenses, but the other licenses will continue to be used."

Another measure of success

However, statistics are only one way to measure the licenses' success, as Peter Brown, executive director of the Free Software Foundation, emphasizes. While Brown says he is "happy with the rate of adoption," he suggests that the more important proof of the licenses' success is their ability to educate free software users and "prevent free software from being made proprietary. In that sense, we are very happy about it."

Nor is Brown unduly disturbed that the second versions remain the dominant ones, even though they offer less protection than the third ones. "It's not as if there's been a move away from the GPL," he notes. "It's the same GPL, in a sense."

Instead, Brown suggests that the consultation process and the third versions themselves "have helped the conversation about free software progress." The fact that large sections of the FOSS community were consulted about the wording of the new licenses helped both to educate people about the issues surrounding them, and to give them a stake in the process.

In addition, the Free Software Foundation has made considerable efforts to educate users about the licenses, such as its page about the advantages of the third version.

These suggestions are supported by Bui's observations at client sites of people using their knowledge of the GPL licenses to help plan product lifecycles. "That's due to the good work of the FSF," she says. "They have done a really good job of educating people about the GPL and raising their awareness."

Brown also suggests that the lack of legal challenges to the third versions may be a measure of their success, although he admits that they may be too recent to be contested, and that the second versions have not received many challenges, either. But he credits the consultation process with improving the legal language of the licenses, as well as making clear from the number of people involved in the consultation just how large a community any potential violators would be taking on.

Still another factor may be that the technology field has caught up with the licenses. When the licenses were being drafted in 2006-07, lockdown technologies were just starting to appear, so the language to prevent them was seen as unnecessarily radical. Now, with examples like the iPhone, such provisions are starting to seem far-sighted.

"The main thing is, we're satisfied that the changes that we've made seem to have done their job," Brown says.

Future measures of success

A year after third versions began to be released, an absolute judgment of their success is still impossible. No comparison can be made with the success of the second versions after their release in 1991, because the free software community and the pressures upon it have changed so drastically since then.

For another thing, the licenses remain a work in progress. One of the changes in the third version is greater allowance for exceptions -- special clauses that make small modifications to the basic GPL license. Brett Smith, FSF compliance engineer, is still working with the community to modernize and improve exceptions for the third generation. "GPLv3 came out on a Friday, and I came in Monday and started working on the exceptions," Smith says. A year later, they still occupy much of his time, but their effectiveness will be a major factor in how well the licenses themselves function.

It will take several years to see exactly how good a job the third versions do of "futureproofing free software," as Brown puts it. He suspects a major test will be the ability of the AGPL to create and safeguard free network appliances. Nor does he rule out the eventual need for a fourth generation of licenses in response to the discoveries of new loopholes.

For now, the only measure of success is that the third generation of the GPL family seems to be holding its own. It has not replaced the second generation, as many might have assumed it would when the process of creating it first began in 2006. Still, if counted separately from the second generation, in a year it has become the seventh most popular free license, according to Black Duck's statistics.

As Brown points out, "GPLv3 is probably the most adopted license in the last year. And it seems to achieve its aims thus far." For any other license, this performance would be a runaway success. It is only by comparison with the dominance of the second version of the GPL licenses that the success of the third versions might seem disappointing.

But the ultimate success of the third generation GPL, and the question of whether it will replace the second generation or continue to coexist with it, remain almost as uncertain today as they were a year ago.

Bruce Byfield is a computer journalist who writes regularly for Linux.com.

Share    Print    Comments   

Comments

on GPLv3, one year later

Note: Comments are owned by the poster. We are not responsible for their content.

Wrongs statistics

Posted by: Anonymous [ip: 84.170.140.76] on June 28, 2008 12:22 PM
Statistics are wrongs.

There are:
* projects counted two or more times
* non-projects[0]

so from the count you must remove probably 100 or more.

But I have checked to see if it is simple to find project under GPL 3.0 not reported by Palamida and I find it is very easy to find them. I found projects not reported by Palamida for the following case:

1) there are project in which is reported a not GPL 3.0 license (for example GPL 1.0 or 2.0) in summary, but in the code there is GPL 3.0
2) if you search into a free software hosting site not so famous (not sourceforge, gnu, freshmeat, ...) nearly all GPL 3.0 projects are not listed on Palamida
3) if you search projects hosted only on project site and released with GPL 3.0 you have very good chance to discover unknow Palamida projects
4) if you search for personal site of people who release personal programs under GPL 3.0 you are nearly sure to not find these projects on Palamida site

So what I can say is that, I think, Palamida has listed only between 1/10 and 1/30 of real GPL 3.0 projects.
The same can be said for GPL 2.0 or others licenses


[0]
http://www.blackducksoftware.com/oss/project-list
look at 776°
General Public License 3.0 (http://gplv3.fsf.org) 3.0 GNU General Public License V3 or later July '07

Wow the license GPL v. 3.0 is released as GPL 3.0!

#

Re: Wrongs statistics

Posted by: Anonymous [ip: 210.22.83.146] on June 29, 2008 09:41 AM
I have searched the string "gpl3" on en.wikipedia and look at all results (9) I have found the following gpl3 software:

In Palamida archive:
* ChibiOS/RT
* Tigase
* SocNetV

Not in Palamida archive:
* zyGrib

Then I have search "GPLv3" and found in the first 20 results:

In Palamida archive:
* stest
* SugarCRM
* GNU Radius

Not in Palamida archive:
* SXEmacs

So I spend nearly 15 minutes and found:
* 6 GPL3 projects in Palamida archive
* 2 GPL3 projects not in Palamida archive

or 25% not listed in Palamida archive.
So Palamida say 2839 are GPL3 and probably (if my check is correct) they miss 25% of the total GPL3 software.
So 2839 is the 75% of the total, total who is 2839 / 0.75 = 3785 ... or they are missing 946 projects

#

Re(1): Wrongs statistics

Posted by: Anonymous [ip: 76.19.197.128] on July 02, 2008 01:06 AM
Do you seriously think Google is what Palamida/Black Duck use to collect this information? You've GOT to be joking.

#

GPLv3 - successful; could have been even more successful

Posted by: Anonymous [ip: 82.192.250.149] on June 29, 2008 05:41 PM
It's clear that the GPLv3 effort is turning out to be successful. And that the changes from GPLv2 were needed.

It's just a pity that the Linux kernel project (for no real reason) chose to bad-mouth the new version and chose not to adopt it.

#

Re: GPLv3 - successful; could have been even more successful

Posted by: Anonymous [ip: 12.169.163.241] on June 30, 2008 02:17 AM
The Linux kernel project never badmouthed GPL3. Linus Torvalds badmouthed it plenty, though. But he's only one kernel maintainer out of hundreds.

#

Re(1): GPLv3 - successful; could have been even more successful

Posted by: Anonymous [ip: 82.192.250.149] on June 30, 2008 05:28 AM
True. I suspect I'm not alone, though, in having assumed Torvalds spoke for the entire kernel project. His egotistical grandstanding has done a lot of damage.

#

Re(2): GPLv3 - successful; could have been even more successful

Posted by: Anonymous [ip: 81.146.63.67] on June 30, 2008 08:17 AM
It wasn't grandstanding it was practical and philosophical issues which some maintainers agreed with and some didn't.

#

Re(1): GPLv3 - successful; could have been even more successful

Posted by: Anonymous [ip: 216.210.108.162] on June 30, 2008 06:23 PM
There was never any official statement from kernel developers. However, a number of them did issue a statement insisting that there was no need to revise the GPL. -- Bruce Byfield

#

Re(2): GPLv3 - successful; could have been even more successful

Posted by: Anonymous [ip: 147.206.4.254] on July 01, 2008 06:52 PM
"However, a number of them did issue a statement insisting that there was no need to revise the GPL. -- Bruce Byfield"

Seeing the weaseling of certain companies around the terms of GPLv2, as well as the increasing threats of software patents and DRM, I think the creation of a "loophole-closed" GPLv3 was a proper step.

However, I am not sure that the free/open community has enough clout to effectively combat software patents and DRM in this way. It runs the risk of dissuading companies from adopting GPL software. I guess each project needs to decide if this is a stand they want to make, and if not, the GPLv2 is still around.

#

This story has been archived. Comments can no longer be posted.



 
Tableless layout Validate XHTML 1.0 Strict Validate CSS Powered by Xaraya