10

No, just because the software is hosted on SourceForge does not mean that it is open source. In the United States (and many other countries), works are protected by copyright and the author must grant specific licenses. A work that is uploaded to SourceForge without a specific license granted is protected by copyright. However, unlike GitHub, SourceForge ...


6

Are there any security issues with creating an open source project that will run on a website that you host? Not any that wouldn't be a concern for any other site. You should be extra careful to keep sensitive data (API keys, passwords, etc.) out of the source repository though. It's public, so more of a concern than closed source code. How do you ...


6

I would suggest the following: Fork the project on github. Having a fork on github is needed for much of its infrastructure around pull requests. Having a fork on github makes everyones life easier. Optionally: Fork again to vso git. This way you can keep your in house development in house, and have all the issue tracking, CI, and other vso infrastructure ...


5

I would suggest simply using GitHub. Its UI and paradigm is aimed specifically at what you want to achieve. Presumably you are already fetching the original project directly from GitHub, so you have all the internal infrastructure established to continue to do so. Simply forking it on GitHub maintains the link to the upstream original. Having both your fork ...


4

You are likely liable if applications that you run and operate, that store user-supplied data, have that data exfiltrated. The exact nature of the liability depends on the applicable jurisdiction(s): in Europe (and now that the GDPR is in effect also if you cater for European visitors) things can get quite hairy, while the US is generally less-sensitive to ...


4

Your trust level of any service is up to you. Do you trust GitHub? Do you trust your ISP? Do you trust your own machine? If you do not trust GitHub, where do you host your code? An alternative like BitBucket? Do you trust them? Your own private server? Do you trust the company you rented the server from? It never ends. GitHub appears to be a pretty good ...


3

Sure, there are a bunch. Some are better than others for certain things, and some omit features that you may or may not need, so there's no one direct answer. But here are a few useful things to look into: There are a variety of software forges, and some services that will host them for you, too. Sourceforge is probably the most well-known, but there's ...


3

Different licenses have different requirements, but those requirements typically fall in these categories No requirement to distribute the source code. This is most common in permissive licenses that allow the code to be used in closed-source projects. A requirement to provide for a mechanism to download the source code from the same site where the binaries ...


2

If you are the sole copyright holder: You don’t have to distribute the source code at all. Even if the license you chose says that the source code must be provided to people that received the application, this requirement doesn’t apply to you. If you aren’t the sole copyright holder: You must follow what the license says. Each license can have different ...


2

I'm going to assume that your ethical criteria are the same as the FSF's. I observe in passing that the FSF is not just focussed on traditionally-repressive regimes; one of the two C2-class failures in GitHub's report relates to US export controls. As has been noted, GNU Savannah seems to deal with this by not hosting projects that might run foul of US ...


1

The OP has clarified that (s)he means "if I start my Open Source project, is there somewhere in particular I have to host it in order for it to lawfully be Open Source", and that seems a question worth answering. The answer is no. In these days of Infrastructure-as-a-Service (IaaS) there are lots of sites that will provide the hosting engine for you. Most ...


Only top voted, non community-wiki answers of a minimum length are eligible