Eclipse IP Due Diligence TM / DD Meetings 12 – 14 October 2005 Doug Gaff

Contributors: Developers vs. Committers Anyone who makes a contribution to the Eclipse Foundation website or to Eclipse projects is considered a Contributor. For Contributors, Eclipse differentiates between Developers and Committers Committers have more responsibilities than developers. Check-in rights to parts of the project’s CVS repository Active participation in mailing lists and newsgroups Voting in discussions Code review of developer submissions IP due diligence on submissions and assisting project lead in tracking IP Developers who provide frequent and valuable contributions to a project can be nominated to be committers. The Eclipse Standard Charter describes the roles of developers and committers and the process for nominating and voting on committers. http://www.eclipse.org/org/processes/Eclipse_Standard_TopLevel_Charter_v1.0.html

More on Committers Process for becoming a new Committer http://www.eclipse.org/legal/newcommitter.html Member Committer A committer who works for an Eclipse member company Company must execute a Member Committer Agreement http://www.eclipse.org/legal/EclipseMemberCommitterAgreementFinal.pdf Each member committer must fill out a Member Committer Questionnaire http://www.eclipse.org/legal/member_committer_questionnaire.html Individual Committer A committer not working for an Eclipse member company Committer must execute an Individual Committer Agreement http://www.eclipse.org/legal/EclipseIndividualCommitterAgreementFinal.pdf Employer must execute a Committer Employer Consent Form http://www.eclipse.org/legal/employer_consent.pdf Committer must fill out an Individual Committer Questionnaire http://www.eclipse.org/legal/individual_committer_questionnaire.html Committer guidelines http://www.eclipse.org/legal/committerguidelines.html

Code submission and IP Due Diligence Any contributor can submit code to a project. All contributions from non-committers MUST come through a traceable method. While mailing list and newsgroup submissions are technically ok, the preferred and recommended submission method is via Bugzilla attachments. Contributions from Committers do not require Bugzilla attachments. Is the code a “Significant Contribution” requiring IP due diligence? Guidelines: > 100 lines of code not from a Committer Third-party licensed code Code with potential cryptography Bug fixes and minor enhancements are excluded from the “significant” label, but the committer must review the code for appropriateness prior to check-in: technical correctness, no legal or copyright references, no profanity, no cryptography, etc. See the committer guidelines for more information.

Code submission and IP Due Diligence If the submission is a “significant contribution”, the following steps must occur: PMC must approve the technical suitability of the code for the project. Committer must complete the Contribution Questionnaire. http://www.eclipse.org/legal/ContributionQuestionnairePart1-v1.0.htm EMO must perform IP due diligence and approve the contribution. Committer commits the code to the project’s CVS repository Step 3 (if required) must be completed prior to check-in. Appropriate legal documentation must be included about.html EPL notice Source code copyright and licenses Additional licenses for third-party content See http://www.eclipse.org/legal/guidetolegaldoc.html

Code submission and IP Due Diligence Tracking Each Project Lead must track ALL contributions from non-committers and for “significant contributions”. This traceability is public and is available on the projects website. The Planning Council is working on a simple Project Log to automated this: http://www.eclipse.org/org/processes/Guidelines_for_Eclipse_Development_Process/project-log.html Using Bugzilla for everything allows mostly automatic generation of the project log.

The Process Made Easy Have contributor create a Bugzilla entry. Committer: Did I write this code? no no yes Did it come from a Bugzilla? yes Review, create about.html, etc & commit to CVS Fill out a Contribution Questionnaire. yes Does it have a non-EPL license? no yes no Is it >100 LOC? yes Wait for Foundation IP due-diligence to reply that it is ok to include. no Does it have cryptography?

Wow, this is a pain! Yes, but the process… provides full traceability on Eclipse code. ensures that code can carry the EPL label. gives companies confidence in their commercial products built upon Eclipse. Using Bugzilla for all submissions automates the traceability and should simplify this process for developers and contributors.