granos
Joined 12 years ago
Joined 12 years ago
I've had MANY frank conversations with both product and engineering leadership about the current state of the world. The VP of engineering is onboard and understands the pain of what we're going through. Product is a bit harder to convince, but just as important -- probably more important. They understand that my team is having to spend 20%+ of our time just bringing the code into this decade, because I set that expectation early and reinforce it often.
I argued AGAINST a from-scratch rewrite because I knew it would never be ok to stop shipping. But I have been able to convince them that slowing down now will let us move faster later.
Management took the issue very seriously -- in both cases the code was pulled and the features rebuilt. Annual trainings were introduced to make sure people were aware of licenses and that they can't just pull in code without looking. The company actually contributes quite a bit to open source.
You're absolutely correct that most companies wouldn't take the risk. I've seen this taken so far as to need Legal approval for including any new libraries. Unfortunately a lot of developers don't understand what they are doing regarding licenses. They don't understand that they are taking a risk on behalf of the company when they include code with a copyleft license.
Every place I've ever worked for has used code in production with licenses requiring attribution, but it's very rare that I've seen it actually done.