-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Implement a fair and bilateral Contributor Agreement or remove it completely #1115
Comments
Hi @setyb, Thanks for your feedback on the CLA requirement. As you may know, Bitwarden is an open-source product owned and backed by a company, Bitwarden, Inc. We market and sell the Bitwarden product to millions of users. Our business customers range from small teams to large enterprise organizations. Sometimes our customers require us to re-license our product to them under a commercial license since that is more familiar and comfortable for them. In order to relicense code, we must own the copyright to that code. Without a CLA in place, the original contributors own that copyright which would prevent us from engaging in business with these types of customers. This is the main reason why we have a CLA in place. CLA requirements are not that uncommon whenever you contribute to open-source codebases of products managed by a backing company. Some examples here on GitHub include Microsoft, Google, MySQL, kubernetes, and Mattermost, just to name a few. We understand that you may not be comfortable signing a CLA and we respect your decision not to contribute due to this requirement. If you have any specific questions or concerns, feel free to contact us directly and we'll do our best to address them. |
Hi Kyle, Thank you for your nice and thoughtful response. I spent a few days time thinking about the desires of Bitwarden Inc., which as you mentioned, are really just a reflection of the desires of some of Bitwarden Inc.'s clients. Would it be satisfactory to replace the lengthy CLA with something that simply reads along the lines of: "By providing contributions to the Bitwarden project, I hereby release all such contributions into the public domain." I would be willing to sign such an agreement, and I think it would meet the expressed desires of Bitwarden Inc.'s clients. I think the fewer words, the better. But, if needed, the words "free of all restrictions" could be added after the words "public domain". |
I have submitted multiple pull requests, but some of my code still has not been added to the project because I have not agreed to the unilateral Contributor Agreement.
I will not sign the agreement, as currently written.
The current lengthy legal agreement is unilateral and only serves to protect the interests and profits of Bitwarden, Inc.
It does not protect the author of the code in any way.
I am willing to sign a bilateral agreement that serves both Bitwarden, Inc. and contributors, but I am not willing to sign a lopsided agreement like this one.
I also do find it a bit egregious for a for-profit corporation to ask an individual - especially one who has received no financial compensation - to sign a written contract of this length and severity without compensating them for the cost of legal counsel to review the contract in full. If you would like to provide compensation, we can discuss that possibility, but I doubt any competent legal counsel will advise me (or anyone else) to sign such a unilateral contract.
I have contributed to over 80 different open-source projects over the years (from the smallest to the largest), and I have never been required to sign any legally binding agreements.
Here is the unilateral legal agreement that I am being asked by Bitwarden Inc., via their assigned agent, to sign:
The text was updated successfully, but these errors were encountered: