CVE Alerting Platform

Re:CVE Alerting Platform by hardwaresofton on Tuesday April 13, 2021 @05:24AM (#26789980)

Thanks for this link to another project that I'd prefer.

Just a small nitpick though, both are "open source" but only one of them is "free". I know that's what you meant but wanted to point it out. Some open source software that most people like (ex. Sentry) is BSL so it's not an uncommon license.

BSL is open source software but you cannot "free"ly use it (to make money) -- GPL v2 is free software.

[ Parent | on HN ]

Re:CVE Alerting Platform by tsteenbe on Tuesday April 13, 2021 @05:42AM (#26790102)

Good catch I missed that openCVE is Business Source License which I actually do not consider to be open source.

[ Parent | on HN ]

Re:CVE Alerting Platform by cpach on Tuesday April 13, 2021 @07:07AM (#26790641)

I agree. If it doesn’t follow the Debian Free Software Guidelines then I wouldn’t call it open source.

https://en.m.wikipedia.org/wiki/Debian_Free_Software_Guideli...

[ Parent | on HN ]

Re:CVE Alerting Platform by hjek on Tuesday April 13, 2021 @11:45AM (#26793935)

> BSL is open source software but you cannot "free"ly use it (to make money)

To nitpick your nitpick: That wouldn't be open source but source-available software[0].

[0]: https://en.wikipedia.org/wiki/Source-available#Distinction_f...

[ Parent | on HN ]

Re:CVE Alerting Platform by hardwaresofton on Tuesday April 13, 2021 @01:06PM (#26795480)

Thanks for this, will try to remember and use that term instead

[ Parent | on HN ]