[License-review] License Review Submission: Irrevocable MIT License (MIT-I)
Jean-Sebastien Carle
ac266132 at gmail.com
Thu Jul 31 14:48:50 UTC 2025
Dear OSI License Review Committee,
I am submitting the Irrevocable MIT License (MIT-I) for review and consideration for OSI approval.
1. Purpose and Context
In recent years, the open source ecosystem—particularly within the .NET community—has experienced a marked increase in what developers refer to as "bait-and-switch" practices. Widely adopted, foundational libraries have, after years of being distributed under permissive licenses like MIT or Apache-2.0, been relicensed under more restrictive or commercial terms. In some cases, maintainers have also removed prior releases from public repositories, restricting access for the community.
Notable, Chronological Examples:
Hangfire (2019):
Introduced commercial usage restrictions, changing from its original permissive license to a more restrictive model.
IdentityServer (2022):
IdentityServer4 was discontinued and replaced by Duende IdentityServer, adopting a commercial license that restricted free use to organizations under $1M annual revenue, effectively removing the free and open-source option for the broader community.
Moq (2023):
Introduced SponsorLink telemetry in version 4.20, which created privacy concerns and introduced a "nagware" component. Although later rolled back due to community backlash, this event eroded trust and exposed a vulnerability in open source project governance.
FluentAssertions (2024):
Switched from Apache-2.0 to a paid commercial license for all commercial use as of version 8.0, catching much of the community off guard.
AutoMapper (2025):
Introduced a dual/commercial licensing model, making certain features or uses subject to commercial licensing.
MediatR (2025):
Adopted a similar dual/commercial licensing approach, following the pattern of AutoMapper.
WiX (2025):
Introduced the Open Source Maintenance Fee, moving from free software to paid software for all users.
These incidents have directly disrupted production software, build pipelines, and ongoing development efforts for countless teams and organizations worldwide. They have also generated significant uncertainty and mistrust, as users can no longer assume that the rights granted under permissive licenses will remain available or that distributed software will remain accessible.
2. License Overview
The MIT-I License is based closely on the OSI-approved MIT License but introduces two explicit changes:
1. Irrevocability Clause:
"The rights and permissions granted under this license for this version (and all previous versions) of the Software are perpetual, non-exclusive, and irrevocable. The copyright holder(s) may not revoke, modify, or relicense this version of the Software or any previous version released under these terms. This version of the Software will remain under the terms of this license forever."
2. Anti-Removal Clause:
"The Software may not be removed from public repositories solely for the purpose of limiting access to versions previously distributed under this license."
3. Justification for Changes
A. Irrevocability
Problem:
While the MIT License grants rights "free of charge, to any person obtaining a copy," there is ongoing debate over whether the copyright holder could, after-the-fact, attempt to revoke those rights for already-published versions, or relicense them in a manner that would cloud the rights of existing users. Legal scholars generally agree that MIT is "effectively irrevocable," but this is not explicit. Recent examples such as Hangfire (2019), IdentityServer (2022), and FluentAssertions (2024) have demonstrated that authors may attempt to alter licensing terms in ways that are unexpected and disruptive for the user community.
Solution:
By explicitly stating that the grant is irrevocable for all versions ever released under the MIT-I License, this license closes the door to after-the-fact revocation or retroactive relicensing, removing any legal gray area and enhancing user trust.
B. Anti-Removal
Problem:
Several high-profile cases (notably IdentityServer (2022) and Moq (2023)) have seen maintainers remove prior versions of software from public package repositories (such as NuGet or GitHub), with the intent of forcing migration to new, more restrictive licenses or to prevent continued use of "grandfathered" open source versions. This practice disrupts production systems, CI/CD pipelines, and the broader software supply chain. The MIT License does not currently prevent this.
Solution:
The MIT-I License introduces a narrowly scoped clause prohibiting removal "solely for the purpose of limiting access" to previously distributed versions. This prevents anti-competitive or community-hostile behavior, while not interfering with legitimate removals for DMCA compliance, malware, or security incidents.
4. Why These Changes Are Necessary and Not Already Covered
Irrevocability:
No currently OSI-approved license makes irrevocability as explicit and unambiguous as MIT-I. The Apache-2.0 license includes a patent grant that is irrevocable under certain conditions, but the copyright grant itself is not as clearly defined in terms of irrevocability as is now needed in practice.
Anti-Removal:
No major OSI license addresses the scenario of removal for the purpose of restricting access. This provision is essential to prevent "soft" revocation via disappearance from public infrastructure, a tactic not envisioned when the MIT License was created.
5. Summary
The MIT-I License preserves the well-understood, widely-accepted terms of the MIT License but explicitly addresses two modern vectors for undermining open source stability and trust: legal ambiguity about license permanence, and the threat of intentional removal from distribution channels. These two changes are narrowly tailored, with the intent of protecting the open source community from recent real-world harms while maintaining maximal freedom for all parties.
This license text has not been reviewed by a lawyer. It was drafted solely by me, as an open source developer and community member.
I respectfully request the OSI's consideration and approval of the Irrevocable MIT License (MIT-I) as an official open source license.
Sincerely,
Jean-Sebastien Carle
-------------- next part --------------
Irrevocable MIT License (MIT-I)
Copyright (c) [year] [your name]
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
The rights and permissions granted under this license for this version (and
all previous versions) of the Software are perpetual, non-exclusive, and
irrevocable. The copyright holder(s) may not revoke, modify, or relicense this
version of the Software or any previous version released under these terms.
This version of the Software will remain under the terms of this license
forever.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
More information about the License-review
mailing list