News

Microsoft Mends Breach in Open Source Sandcastle

Microsoft has released all of the source code used in its Sandcastle project, which is now published at the CodePlex open source developer's Web site, according to a blog. Sandcastle helps developers of managed class libraries create uniform documentation on their projects, using MSDN style.

The Sandcastle project made the news in early June when Sam Ramji, Microsoft's open source software lab director, ordered Sandcastle yanked from CodePlex. At the time, it was noted that the source code for the project had not been published in keeping with the OSI's Open Source Definition for open source software.

Microsoft's open source license is called the Microsoft Public License (Ms-PL), which the OSI approved in October of last year. Such OSI-approved licenses allow the free sharing of code, for both commercial and noncommercial applications, although Microsoft's Ms-PL confines future distributions of code to the Ms-PL license.

With the release of the code, Ramji noted yesterday that the Sandcastle project now meets the OSI's terms for open source software. However, the Microsoft team "found other cases where Microsoft-led projects had been licensed under the Ms-PL but hadn't shared the source," Ramji wrote.

Those projects are currently unpublished and will undergo a review process by Microsoft's teams, he added.

Microsoft is still getting its feet wet with open source licensing, but the company has been signaling a new approach. In February, the company announced its "interoperability principles," and late last month Microsoft released additional documentation on protocols used in some of its core products. However, Microsoft officials have not yet stepped back from the claim that open source software violates 235 of Microsoft's patents.

Moreover, the Software Freedom Law Center had declared back in March that Microsoft's interoperability principles were essentially contrary to GNU General Public Licensing.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

comments powered by Disqus

Featured

  • VS Code v1.99 Is All About Copilot Chat AI, Including Agent Mode

    Agent Mode provides an autonomous editing experience where Copilot plans and executes tasks to fulfill requests. It determines relevant files, applies code changes, suggests terminal commands, and iterates to resolve issues, all while keeping users in control to review and confirm actions.

  • Windows Community Toolkit v8.2 Adds Native AOT Support

    Microsoft shipped Windows Community Toolkit v8.2, an incremental update to the open-source collection of helper functions and other resources designed to simplify the development of Windows applications. The main new feature is support for native ahead-of-time (AOT) compilation.

  • New 'Visual Studio Hub' 1-Stop-Shop for GitHub Copilot Resources, More

    Unsurprisingly, GitHub Copilot resources are front-and-center in Microsoft's new Visual Studio Hub, a one-stop-shop for all things concerning your favorite IDE.

  • Mastering Blazor Authentication and Authorization

    At the Visual Studio Live! @ Microsoft HQ developer conference set for August, Rockford Lhotka will explain the ins and outs of authentication across Blazor Server, WebAssembly, and .NET MAUI Hybrid apps, and show how to use identity and claims to customize application behavior through fine-grained authorization.

  • Linear Support Vector Regression from Scratch Using C# with Evolutionary Training

    Dr. James McCaffrey from Microsoft Research presents a complete end-to-end demonstration of the linear support vector regression (linear SVR) technique, where the goal is to predict a single numeric value. A linear SVR model uses an unusual error/loss function and cannot be trained using standard simple techniques, and so evolutionary optimization training is used.

Subscribe on YouTube