Software Freedom Conservancy Calls for GitHub Boycott

The Software Freedom Conservancy (SFC),  a non-profit that provides infrastructure support for free and open source software projects, is urging developers to stop using GitHub and move their projects to other platforms. The organization has historically had a number of public grievances with GitHub, which it outlines on its Give Up On GitHub site. GitHub’s public launch of Copilot last week was the final straw for SFC.

“We are ending all our own uses of GitHub, and announcing a long-term plan to assist FOSS projects to migrate away from GitHub,” SFC Policy Fellow Bradley M. Kuhn said. “While we will not mandate our existing member projects to move at this time, we will no longer accept new member projects that do not have a long-term plan to migrate away from GitHub.”

The SFC’s member projects include BusyBox, Git, Homebrew, OpenWrt, Buildbot, Houdini, and phpMyAdmin, to name a few. The organization is financially supported by Google, Mozilla, and Redhat, among others.

Kuhn said the SFC has been actively communicating with Microsoft and GitHub for a year about concerns regarding Copilot. He claims GitHub ignored invitations to discussions on the moral implications of AI-assisted software, and neglected to answer the SFC’s questions.

“Launching a for-profit product that disrespects the FOSS community in the way Copilot does simply makes the weight of GitHub’s bad behavior too much to bear,” Kuhn said.

Specifically, the SFC is demanding GitHub cite legal precedent for its former CEO’s claims that “(1) training ML systems on public data is fair use, (2) the output belongs to the operator, just like with a compiler.”

The two other questions the SFC could not obtain answers for are as follows:

  • If it is, as you claim, permissible to train the model (and allow users to generate code based on that model) on any code whatsoever and not be bound by any licensing terms, why did you choose to only train Copilot’s model on FOSS? For example, why are your Microsoft Windows and Office codebases not in your training set?
  • Can you provide a list of licenses, including names of copyright holders and/or names of Git repositories, that were in the training set used for Copilot? If not, why are you withholding this information from the community?

The SFC contends that Microsoft and GitHub are exploiting FOSS for profit and that its behavior, relative to its peers (Amazon, Atlassian, and GitLab), is markedly worse when it comes to supporting FOSS.

“GitHub also has a record of ignoring, dismissing and/or belittling community complaints on so many issues, that we must urge all FOSS developers to leave GitHub as soon as they can,” Kuhn said.

The SFC formed a committee earlier this year to investigate copyleft implications of AI-assisted programming. They are exploring a preliminary finding that AI-assisted software development can be done in a way that respects FOSS licenses.

“While Microsoft’s GitHub was the first mover in this area, by way of comparison, early reports suggest that Amazon’s new CodeWhisperer system (also launched last week) seeks to provide proper attribution and licensing information for code suggestions,” Kuhn said.

So far SFC’s call for action has received a tepid response. Although Copilot remains a controversial tool to many, its use of open source code is perceived differently by those who have embraced it as a utility.

“It’s been really useful in beta when I had to make some config files in Ruby, which I rarely use and often forget,” software engineer Joe Mattiello said. “FOSS is give and take. The point of open-source is to be open. Though any projects that use non-commercial licenses shouldn’t be included if it’s a paid project.”

Another prevailing opinion is that GitHub didn’t misuse open source software in training its AI on OSS projects but rather allowed AI to read the source code and learn from it. In this context, the SFC’s fervent crusade against GitHub for using shared code appears more absurd.

For the time being, it appears the SFC is content to continue research with the help of its committee, but part of the organization’s work is to assist member projects in enforcing the terms of FLOSS licenses, including through litigation. Its heavy focus on copyleft compliance, including enforcement of the GPL, may come to bear on Copilot in the future, as the SFC’s committee learns more about the copyleft implications of AI-assisted programming.


3 responses to “Software Freedom Conservancy Calls for GitHub Boycott”

  1. The thing that irks me…………all these open source, free, entities…a whole bunch of people got together, this includes Matt Mullenweg and then they go on how evil companies are for trying to make a profit on things that shouldn’t be.

    What is wrong with wanting to make a profit?

    Guess what? Domains cost money, Hosting costs money. Part of GPL says you can do this (for WordPress).

    On the give up Github page…….guess what? things cost money. That coffee I drank this morning while typing a post on my site…costs money. The electricity for the coffee maker to operate, the water, the grinder to grind the coffee beans, making the coffee. It all costs money.

    Oh my god everything must be open source….otherwise you are evil.

    Everyone must give time back to the project.

    I wonder how SFC pays for their domain and hosting. Donations are not a stable way to live.

    Who are these people who think they should fight for things? Who put them in charge?

    Guess what? I created a plugin for a client, I am not releasing it, it belongs to the client and the client will not release it. I am such an evil person.

    Who is SFC to tell ME (or anyone else) how to use software?

    All these organizations, a bunch of people get together and decide things? I can’t remember I, as a member of the community, being asked if I want THEM to represent me.

    • I’m not opposed to my open source code being used to train AI software authors. I’m not opposed to my open source work being reused by other coders or AI code authors. I am 100% against the use of my work without a) full & proper attribution, b) full adherence to the licence(s) I publish my work(s) under, and c) link-backs to my projects.

      The above 3 concerns are the crux of the issue. I bet few are worried about their code being used. Many would welcome the recognition — a few more projects to add to their library of involvements. What people are worried about, and rightly so, are the lack of recognition, the lack of proper attribution and the ignorance of licence code is released under.

      If Copilot does recognise, attribute and adhere to licences then the fault lies with GitHub which must do better to publicise that that it does all three and thereby reduce misunderstanding within the community.

      • I, personally, would always attribute any code of yours (or anyone else’s) that I use.

        However, not all licenses require attribution. Like the WordPress Photos Directory (CC0 licensed).

        We have people who go on that things must be done their way. I could grab one of your WordPress plugins, since it is automatically GPL, and twist it around so much and change the name and release it. Without asking you for permission.

        Though, how much change does a plugin (or theme) have to get so it is a completely totally new plugin/theme?

        I do not need anyone to fight for me if someone is breaking my licenses.

        I also don’t like all these people who demonize others who make money out of open source.


Subscribe Via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

%d bloggers like this: