“Should we go open source or proprietary?”
That oft-repeated question is actually not so black and white—and like most things in life there is a whole lot of grey. Today, open source is usually not purely open source. And, die-hard proprietary software companies are today buying open source companies and running their own open source projects. Net-net, both the open source and proprietary models produce good software—and that’s what we all want in the end. But, I’d simply like to debunk some common myths about what open source software really is.
Turns out there is a lot of middle-ground — and there are actually few instances in which a company maintains purity. In fact, many companies claim their software is open source but actually sell a product that may only be 80 percent open source, with proprietary add-ons. This is particularly common with major companies using the Apache distribution of Hadoop. On the flip-side, many big traditional software companies who have shunned open source are actually buying up smaller open source companies and integrating their product into larger proprietary offerings.
One CEO of an open source software company recently said, “do open source, but just buy it from us.” With open source software, there is a huge pricing spectrum from free to very expensive. More often than not, there is an enterprise edition with a pricey commercial license, and only a stripped-down “community edition” with a free GNU AGPL license, but (the AGPL license is tricky, too, because it actually means that the company gets to profit from your code contributions). In an interview with Computer Business Review, MongoDB CEO Dev Ittycheria admitted “we open sourced [MongoDB] as a freemium strategy” – i.e., to drive adoption for their paid licenses. Also, open source software usually comes in a large box labeled “some assembly required,” so a company is really just shifting its costs to the labor category.
So if enterprise licenses are expensive, why not just reserve those licenses for production servers and use the community edition for dev servers? Nope. Most open source companies expressly forbid mixing licenses. If you want the enterprise features, they aren’t free. Most companies basing their product on allegedly free open source have policies to ensure that you’ll end up buying from them at some point. If they don’t, then I’d steer clear because the company is likely shredding VC money and will either hike prices later or go bankrupt.
It’s easy these days to take a look at GitHub and see how many people are actively contributing to open source projects. The truth is, even for companies claiming thousands of followers, there are only a handful of people actually contributing significantly to the core product. Not exactly a crowd. And, to contribute, developers have to enter into an agreement with the company to give them full rights over their contributions. TechRepublic noted that “While open source companies tend to do a lot of hand-waving about community, the reality is that invariably they mean ‘community of users,’ not of contributing developers.”
If measuring quality only by the number of defects, then open source and proprietary software are about equal. But, there’s more to software quality than defects. The Synopsys Cybersecurity Research Center notes that the growth of open source usage within commercial applications has introduced security and vulnerability risks for organizations that aren’t carefully managing and maintaining their software.
The most concerning trend in this year’s analysis is the mounting security risk posed by unmanaged open source, with 75% of audited codebases containing open source components with known security vulnerabilities, up from 60% the previous year. Similarly, nearly half (49%) of the codebases contained high-risk vulnerabilities, compared to 40% just 12 months prior.
Synopsys, May 2020
MarkLogic is proprietary software but provides a free developer’s license, which gives developers the ability to download and install the FULL capabilities of MarkLogic and get going in a few minutes. And, MarkLogic makes some projects open source.
I think that MarkLogic’s approach has helped ensure dedication to building strong enterprise features at the core of the product, while still offering an opportunity for developers to contribute code and engage in a community around the product. In other words, MarkLogic is taking an approach that gets the best of both worlds, which seems to be where the world is heading. Because, at the end, we all just want good software.
Matt Allen is a VP of Product Marketing Manager responsible for marketing all the features and benefits of MarkLogic across all verticals. In this role, Matt interfaces with the product and engineering team and with sales and marketing to create content and events that educate and inspire adoption of the technology. Matt is based at MarkLogic headquarters in San Carlos, CA and in his free time he is an artist who specializes in large oil paintings.
Let our experts teach you how to use Sitefinity's best-in-class features to deliver compelling digital experiences.Learn More
Subscribe to get all the news, info and tutorials you need to build better business apps and sites
You can also ask us not to share your Personal Information to third parties here: Do Not Sell or Share My Info
We see that you have already chosen to receive marketing materials from us. If you wish to change this at any time you may do so by clicking here.
Thank you for your continued interest in Progress. Based on either your previous activity on our websites or our ongoing relationship, we will keep you updated on our products, solutions, services, company news and events. If you decide that you want to be removed from our mailing lists at any time, you can change your contact preferences by clicking here.