News

Microsoft Mends Breach in Open Source Sandcastle

Microsoft has released all of the source code used in its Sandcastle project, which is now published at the CodePlex open source developer's Web site, according to a blog. Sandcastle helps developers of managed class libraries create uniform documentation on their projects, using MSDN style.

The Sandcastle project made the news in early June when Sam Ramji, Microsoft's open source software lab director, ordered Sandcastle yanked from CodePlex. At the time, it was noted that the source code for the project had not been published in keeping with the OSI's Open Source Definition for open source software.

Microsoft's open source license is called the Microsoft Public License (Ms-PL), which the OSI approved in October of last year. Such OSI-approved licenses allow the free sharing of code, for both commercial and noncommercial applications, although Microsoft's Ms-PL confines future distributions of code to the Ms-PL license.

With the release of the code, Ramji noted yesterday that the Sandcastle project now meets the OSI's terms for open source software. However, the Microsoft team "found other cases where Microsoft-led projects had been licensed under the Ms-PL but hadn't shared the source," Ramji wrote.

Those projects are currently unpublished and will undergo a review process by Microsoft's teams, he added.

Microsoft is still getting its feet wet with open source licensing, but the company has been signaling a new approach. In February, the company announced its "interoperability principles," and late last month Microsoft released additional documentation on protocols used in some of its core products. However, Microsoft officials have not yet stepped back from the claim that open source software violates 235 of Microsoft's patents.

Moreover, the Software Freedom Law Center had declared back in March that Microsoft's interoperability principles were essentially contrary to GNU General Public Licensing.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

comments powered by Disqus

Featured

  • GitHub Expands Copilot Enterprise Search in Visual Studio and VS Code

    GitHub supercharged search for its Copilot Enterprise AI assistant in both Microsoft's Visual Studio IDE and Visual Studio Code so developers can now get results from well beyond local codebases, including the internet.

  • What's New in TypeScript 5.5, Now Generally Available

    Microsoft shipped the latest iteration of its type-infused superset of JavaScript, TypeScript 5.5, introducing inferred type predicates, control flow narrowing, JSDoc @import and other enhancements.

  • GitHub Copilot for Azure Gets Preview Glitches

    This reporter, recently accepted to preview GitHub Copilot for Azure, has thus far found the tool to be, well, glitchy.

  • New .NET 9 Templates for Blazor Hybrid, .NET MAUI

    Microsoft's fifth preview of .NET 9 nods at AI development while also introducing new templates for some of the more popular project types, including Blazor Hybrid and .NET MAUI.

  • What's Next for ASP.NET Core and Blazor

    Since its inception as an intriguing experiment in leveraging WebAssembly to enable dynamic web development with C#, Blazor has evolved into a mature, fully featured framework. Integral to the ASP.NET Core ecosystem, Blazor offers developers a unique combination of server-side rendering and rich client-side interactivity.

Subscribe on YouTube