467

Bitwarden isn't going proprietary after all. The company has changed its license terms once again – but this time, it has switched the license of its software development kit from its own homegrown one to version three of the GPL instead.

The move comes just weeks after we reported that it wasn't strictly FOSS any more. At the time, the company claimed that this was just a mistake in how it packaged up its software, saying on Twitter:

It seems like a packaging bug was misunderstood as something more, and the team plans to resolve it. Bitwarden remains committed to the open source licensing model in place for years, along with retaining a fully featured free version for individual users.

Now it's followed through on this. A GitHub commit entitled "Improve licensing language" changes the licensing on the company's SDK from its own license to the unmodified GPL3.

Previously, if you removed the internal SDK, it was no longer possible to build the publicly available source code without errors. Now the publicly available SDK is GPL3 and you can get and build the whole thing.

you are viewing a single comment's thread
view the rest of the comments

Wow, a commercial open source product that COULD have pulled a rugpull, looked for all the world like they were planning a rugpull, just uh, did the right thing?

Good job, Bitwarden.

[-] gsfraley@lemmy.world 74 points 2 days ago

I know, it's a huge relief seeing this as someone who uses the free tier. I think I'll cough up for the advanced tier if they stick to their guns on this decision.

[-] TheHobbyist@lemmy.zip 49 points 2 days ago

This. I will resume my recommendation of Bitwarden.

[-] octopus_ink@lemmy.ml 52 points 2 days ago

I'm sure all the folks who were quick to ignore or dismiss their clarification of the packaging issue at the time will be just as quick to make comments like these as they were to skewer them then.

[-] sugar_in_your_tea@sh.itjust.works 7 points 1 day ago* (last edited 1 day ago)

I tried convincing people to give them the benefit of the doubt and see what they do, but no, everyone seemed to jump to conclusions.

Glad my trust wasn't misplaced this time. I have been and continue to be a paying customer.

[-] baatliwala@lemmy.world 6 points 20 hours ago

everyone seemed to jump to conclusions.

Honestly, everyone's been so burned by companies pulling the wool over their eyes that there's just no trust left. People were happy with Mozilla 5-6 years ago and nowadays everyone is a skeptic.

You might be right in this case but they weren't wrong.

[-] sugar_in_your_tea@sh.itjust.works 2 points 12 hours ago

I get it, some orgs/projects do bad things, and we should absolutely roast them for it. But I believe in giving the benefit of the doubt for a period before melting down.

For example:

  • Mozilla - looking into ads (and have been for a few years) as an alternative revenue source to Google search; I hate ads, but the browser is still better for me than others, so I'll wait to see what they are planning
  • Docker - moved to a commercial tier, but their community tier is still quite viable, so I still use it; I'm experimenting w/ alternatives, but I don't need to jump ship just yet (was getting ready a few years ago when they announced the separate "community" builds)
  • Opera - was never FOSS, but they were a good browser when they had their own engine; that changed, so I jumped ship and went back to Firefox (had left Firefox because I wanted more than just IE/Chrome/Firefox/Safari)
  • Ubuntu - I used them for a while, but they kept making changes I and the community didn't like, so I bailed; this was long before the current snap nonsense, and I've stayed away ever since (switched to Fedora then Arch and now openSUSE)

When a software project you use changes for the worse, look for alternatives, but give that product time to fix it. If they continue on the negative path, then definitely bail. If everyone bails at the first hint of trouble, we end up with a ton of half-baked projects instead of a few good ones. Give feedback and support good projects.

[-] baatliwala@lemmy.world 1 points 10 hours ago

Yep, you're right there.

[-] Llewellyn@lemm.ee 2 points 22 hours ago* (last edited 22 hours ago)

but no, everyone seemed to jump to conclusions

And I'm certain that it has served as the catalyst for the bitwarden decision.

[-] sugar_in_your_tea@sh.itjust.works 1 points 12 hours ago* (last edited 12 hours ago)

I disagree, but unfortunately, we will probably never know. That said, I'm not against the outrage, I'm just against the conclusions. You don't need to immediately abandon a project at the slightest hint they're moving in a direction you don't like, what you should do is start watching that project a bit more closely to see if they correct or they make additional changes you don't like.

We should be taking the rational approach instead of the reactionary approach, but social media in general seems to love reacting instead. I've abandoned projects that went a direction I don't like, but I usually give them a few months after the first sign of problems. I'm currently doing that w/ Mozilla and I want to see what they do with their advertising push before jumping ship.

[-] njordomir@lemmy.world 15 points 2 days ago

I will remember this, even more so because of the confused drama that preceded it. In general, I find it difficult for me to endorse any commercial entity, but Bitwarden has my admiration and I will continue to offer it as a better alternative to people I see storing their passwords in Chrome or Lastpass. I'm also happy to pay a bit to support a good product and will continue to support the development even if I switch to self-hosted at some point.

this post was submitted on 05 Nov 2024
467 points (99.0% liked)

Technology

59137 readers
2095 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS