Why should you pick a license?
In other words, why not just put code online without a license? A license clarifies the conditions under which your code can be re-used. In absence of a license, the author still retains copyright, and the conditions under which the code can be used are unclear. A sentence like "feel free to use this code" does not improve the situation, because it does not clarify to what extent any possible user should "feel free" to use it. Standard licenses provide pre-defined sets of standard conditions, which both providers and users only have to understand once, and then immediately can recognise/categorise later.
Also see "Why is an open-source licence useful?" on the Software Sustainability's Choosing an open-source licence page article.
Picking a license
The most common licenses for a given artifact can be determined by its type: code, data, or any other generic digital "creative work" (documentation, reports, figures). For any given project, its components can be licensed independently by type.
At the most basic level, one must decide on whether one wants to use a copyleft license or a more permissive license. While copyleft assures that code changes by any future contributors must stay public, permissive licenses only require attribution in derived works.
|| GPL licenses
|| MIT, BSD, Apache
The following minimal questions can give a guideline whether one should choose a copyleft or a permissive license for a project. The Wikipedia article on Free software licenses gives A more in-depth overview on both types and their properties.
- Are you ok with your code becoming part of a closed-source commercial software product?
- No: GPL
- Yes: permissive licenses (MIT/BSD/Apache)
- Do you want to force users to publish their improvements to your software, or to software they develop based on your software, under the same licence?
- No: permissive licenses (MIT/BSD/Apache). This makes the code more broadly usable, but also allows people to take the code without sharing their improvements to it.
- Yes: GPL. This ensures that any future changes/improvements to the code remain free and open.
Developers who use GPL code must publish the source code available they share or sell an application built upon it. In this case, the source code must also contain any changes the developers may have made. If GPL code is used but not shared or sold, the code is not required to be made available and any changes may remain private. This has the important consequence that software written under such a license can not be included in "non-free" software. The GPL licenses are:
- GPL: the basic GPL license
- LGPL: Lesser GPL. Permits non-free software to link to the LGPL-licensed software, which the GPL does not.
- AGPL: Affero GNU GPL. It closes a loophole in the GPL that permits somebody to operate a web application that uses GPL code, without making the code available to users
The article Why you should use a BSD style license for your Open Source Project on freebsd.org. The permissive licenses allow code to be re-used with no restrictions, including the possibility to build commercial software for which new code is no longer made publicly available at all.
The site choosealicense.com has a great three-column summary of the differences between the major open source licenses. Summary from their explanations (links to their license description pages):
- The MIT license is a simple permissive license
- The Apache License adds an additional term explicitely granting code contributor's patent rights to the user of such code.
- The BSD license, or its newer even shorter successor ISC is virtually identical to MIT, but worded shorter.
One important aspect of all these licenses is the liability clause. It prohibits any code user from holding the code producer liable for any damages caused by using the software code.
The Creative Commons license family is probably most widely known. As of now (September 2015), the fourth version of these licenses have been published.
- Do you want to assure that derived works must be published under a similar (compatible) license?
→ Creative Commons Share-alike (CC-BY-SA). This is the license for example chosen by Wikipedia.
- Do you want to allow commercial use?
→ Creative Commons Non-commercial (CC-BY-NC) or (CC-BY-NC-SA)
- Do you want to allow others to share changes or improvements to your data, or only the unchanged original data that you provide?
→ Creative Commons No Derivatives (CC-BY-ND) or (CC-BY-NC-ND)
At what point of time to choose/can I change license?
With the first release (if possible already for “small” releases like within your institute) detmermine a licence for your project.
Can I change the licence? The important thing is that, when you receive a copy of source code with a particular license, you have been granted that license. So long as the license doesn't have a revocation clause, it's permanent. Related question on StackOverflow: What happens when an open source project changes its license?
But the license can be changed: You can change the licence for the next version/release if all contributors (copyright holders) agree, or have previously agreed on the possibility of doing so, via a contributor agreement. Search for "contributor (license/assignment) agreement" online, for pointers on how to enable the latter up front. (cf. http://opensource.org/faq#contributor-agreements, http://wiki.civiccommons.org/Contributor_Agreements)
What does sublicensing mean?
"The basic idea [...] is that if this is granted, a licensee can become a licensor of some of the rights of the grant they received regardless of any other claim they may have to copyright control over what they distribute." Source: https://programmers.stackexchange.com/questions/189633/what-sublicense-actually-means
Sublicensing allows somebody to relicense all or part of the licensed software, for example, to use BSD-licensed code in a closed-source commercial application.
What effects does it have to use a "non-commercial" restricting license?
The article Consequences, risks and side-effects of the license module “non-commercial use only” on the Open Knowledge blog - and especially the linked 22 page leaflet (PDF) - comprehensively discusses that question. TL;DR: The leaflet answers the question "Does the NC [non-commercial] module prevent commercial usage?" with "Yes, but often all in the wrong places."