(I spent a fair number of years on Apache's legal committee and can
possibly assist here)
Contributor agreements come in two forms.
On one hand are the "Copyright Assignments" where the code ownership is
handed over to the project. Typically this is pushed by projects with
company backing and is the source of the licensing scandals (Redis,
Elastic, and others) in the last few years.
The other is "Contributor License Agreement" (CLA), that for instance
Apache Software Foundation is using. This is an "assurance" from the
contributor, and possibly the employer of said contributor, that he/she
has the copyright of every piece of code contributed. It is said to
"protect the contributor from legal risks", but personally I fail to see
how, and I think it is to protect the Foundation.
One of the challenges for either of these, is that "the project" is not
(AFAIK) a legal entity and hence can't be the copyright owner.
The CLA doesn't bring much to the table in this case, so let's ignore
that. (BUT, putting one's own name in the Copyright header of source
files is a legal risk and not actually required to claim Copyright if
one ever needs to. The source of truth sits in source control system,
something we can easily bring to life, but harder and more time
consuming for a legal team to search and find.)
For Copyright Assignment, you would either need to create a legal entity
(company, foundation, religious institution, ++) or assign it to one
particular individual and deal with passing that ownership to new people
over time. Technically speaking, it can be done with a small group of
people. In both cases, a fair amount of legal work is required to cover
the various cases, death, resignation, disagreement (if group) and so
forth.
NOTE: From a contributor's point of view, Copyright Assignment should be
viewed with suspicion. Commercial licensing and other "rug pulls" are
the main motivating factor for having Copyright Assignment. By
maintaining ownership for each individual person that has contributed,
such sleazy tactics are prevented for all time.
Also, the way the text is formulated "Assign all copyright and related
rights in their contributions to the OpenPnP project and its
maintainers.", I could fork the project, claim I am a maintainer and
relicense under a commercial one. GPL is all about NOT having that
option. The LICENSE-AGREEMENT.txt weakens the licensing terms for
everyone.
My recommendation is to rely on the GPLv3's history and legacy. It is
unlikely that a GPLv4 will arrive in the next 20-30 years, and if it
does, I am certain that it will be compatible with GPLv3, in similar
fashion that GPLv2 code bases can be included into GPLv3 projects. And
everything else is pretty well covered
HTH
Niclas
>>>>
openpnp.org/downloads/ [1]> page? I suggest it
>>>> would be good to:
>>>> * Archive the current main branch build as a named version 2.2
>>>> download. We should keep the 2.2 download links alive after
>>> releasing
>>>> 2.4 next month.
>>>> * Add the 2.2 change log information to the download page, which
>>> is at
>>>>
https://github.com/openpnp/openpnp/blob/
>>>> e468422e544562b1e7b6cb7b3dc88df6de4f9b11/CHANGES.md <https://
>>>>
github.com/openpnp/openpnp/blob/ [2]
>>>> e468422e544562b1e7b6cb7b3dc88df6de4f9b11/CHANGES.md>
>>>>
>>>> Toby
>>>>
>>>> On Mon, 16 Jun 2025 at 22:10, 'Jan' via OpenPnP
>>>> <
ope...@googlegroups.com> wrote:
>>>>>
>>>>> Hi Toby!
>>>>>
>>>>> On 10.06.2025 12:34, Toby Dickenson wrote:
>>>>>>>> On Monday, June 2, 2025 at 7:56:03 PM UTC+1 Jan wrote:
>>>>>>>>> If you need any assistance please let me know.
>>>>>>
>>>>>> Jan you handled the final release process last time, and I
>>> have no
>>>>>> idea what steps are required.
>>>>>>
>>>>> You just have to merge it and the wizards will sprinkle magic
>>>> around,
>>>>> just like on the test branch.
>>>>>
>>>>> Jan
>>>>>
>>>>> --
>>>>> You received this message because you are subscribed to the
>>>> Google Groups "OpenPnP" group.
>>>>> To unsubscribe from this group and stop receiving emails from
>>> it,
>>>> send an email to
openpnp+u...@googlegroups.com.
>>>>> To view this discussion visit
>>>
https://groups.google.com/d/msgid/
>>>> openpnp/2fa3c8c5-21f8-44c0-abc7-7e9daaceb66e%
40googlemail.com
>>> [3]
>>>> <
https://groups.google.com/d/msgid/openpnp/2fa3c8c5-21f8-44c0-
>>>> abc7-7e9daaceb66e%
40googlemail.com [3]>.
>>> [4]
>>>>
>>>
>> <
https://groups.google.com/d/msgid/openpnp/7210ced8-1d55-429a-a8b2-
>>>
>>>>
>>>
>> b8412575382an%
40googlegroups.com?utm_medium=email&utm_source=footer
>>> [5]>.
>
> --
> You received this message because you are subscribed to the Google
> Groups "OpenPnP" group.
> To unsubscribe from this group and stop receiving emails from it, send
>
https://groups.google.com/d/msgid/openpnp/67ba59d0-9bbe-4a46-8f94-d9c24319a90dn%40googlegroups.com
> [6].
>
>
> Links:
> ------
> [1]
http://openpnp.org/downloads/
> [2]
http://github.com/openpnp/openpnp/blob/
> [3]
http://40googlemail.com
> [4]
http://40googlegroups.com
> [5]
http://40googlegroups.com?utm_medium=email&utm_source=footer
> [6]
>
https://groups.google.com/d/msgid/openpnp/67ba59d0-9bbe-4a46-8f94-d9c24319a90dn%40googlegroups.com?utm_medium=email&utm_source=footer