Most active commenters
  • sqs(7)
  • cdchn(6)
  • breck(5)
  • mort96(5)
  • collingreen(4)
  • yjftsjthsd-h(4)
  • BaculumMeumEst(3)
  • chubot(3)
  • avianlyric(3)

←back to thread

Sourcegraph went dark

(eric-fritz.com)
424 points kaycebasques | 95 comments | | HN request time: 2.148s | source | bottom
1. sqs ◴[] No.41298641[source]
Sourcegraph CEO here. We made our main internal codebase (for our code search product) private. We did this to focus. It added a lot of extra work and risk to have stuff be open source and public. We gotta stay focused on building a great code search/intelligence product for our customers.

That's what ultimately lets us still do plenty of things for devs and the OSS community:

(1) Our super popular public code search is at https://sourcegraph.com/search, which is the same product customers use internally on their own codebases. We spend millions of dollars annually on this public instance with almost 1M OSS repositories to help out everyone using OSS (and we love when they like it so much they bring it into their company :-).

(2) We also have still have a ton of open-source code, like https://sourcegraph.com/github.com/sourcegraph/cody (our code AI tool).

BTW, if any founders out there are wondering whether they should make their own code open-source or public, happy to chat! Email in profile. I think it could make sense for a lot of companies, but more so for infrastructure products or client tools, not so much for full server-side end-user applications.

replies(14): >>41298707 #>>41299099 #>>41299575 #>>41299592 #>>41299724 #>>41299784 #>>41299956 #>>41300159 #>>41300346 #>>41300771 #>>41301859 #>>41305881 #>>41311564 #>>41312895 #
2. quantumwoke ◴[] No.41298707[source]
Been a fan of sourcegraph since 2016 or so, it's been exciting to watch the pivots along the way. That being said, the loss of transparency here is pretty sad, speaking as a large FOSS repo owner. What were the main factors apart from risk that went into the decision?
replies(1): >>41298885 #
3. sqs ◴[] No.41298885[source]
Thanks for being a fan. And I understand it's a bummer to not have our code be public and open-source anymore. Sorry.

It's a bunch of reasons that add up. I'll give some more details for anyone curious.

(And I know that despite these reasons, lots of HNers probably wish it was not so. I agree! I too wish for a world where all companies could have their code be public and open source.)

- We have a lot of tech around large-scale code graph, indexing, etc., stuff that is very differentiated and hard to build. We were starting to put some of this in separate private repositories and link them in at build time, but that was complex. It added a lot of code complexity, risked bugs, and slowed us down, and if a lot of the awesome stuff was private anyway, what was the point?

- As we've been building Cody (https://cody.dev), our code AI tool, we've seen a LOT more abuse. That's what happens when you offer any free tier of a product with LLM inference. We had to move a lot more of our internal backend abuse logic to private repositories, and it added code complexity to incorporate that private stuff in at build time.

- It confused devs and customers to have 2 releases: an open-source release with less scaley/enterprisey features, and an enterprise release. It was a pain to migrate from one to the other (GitLab also felt this pain with their product) because the open-source build had a subset of the DB schema and other things. It was confusing to have a free tier on the enterprise release (lots of people got that mixed up with the open-source release), and it made our pricing and packaging complex so that lots of our time was spent helping customers understand what is paid and what isn't.

- There were actually very very few companies that were going to pay but then decided to use the open-source version and not pay us. A lot of people probably assume that's why we made this move, but it's not. I think this is because people like the product and see value in it, including all the large-scale code nav/search features that are in our enterprise version.

- Although very very few companies used our open-source version to avoid paying us, we did see it cause a lot of annoyance for devs who were asked by their management to try cloning our product or to research our codebase to give their procurement team ammunition to negotiate down our price. This honestly was just a waste of everyone's time.

- If we got a ton of contributions (we never really solicited any), then it might've changed the calculus. Sourcegraph is an end-user application that you use at work (and when fun-coding, but the primary revenue model is for us to charge companies). For various reason, end-user server-side applications just don't get nearly as many contributions. Maybe it's because you'd need to redeploy your build for a bunch of other users at your company, not just yourself. Maybe it's because they necessarily entail UX, frontend, and scaling stuff, in addition to just adding new features.

- We heard from people who left GitHub that people at GitHub were frequently monitoring our repository to get wind of our upcoming features and launches. Someone from GitHub told me his "job is to clone Sourcegraph". Since then, they obviously deprioritized their code search to re-found GitHub on AI, so we're not seeing this threat anymore. But I didn't love giving Microsoft an unfair advantage, especially since GitHub products are not open source either.

- Since we made our code non-open-source, we've been able to pursue a lot more big partnerships (e.g., with cloud providers and other distribution partners and resellers). This is a valuable revenue stream that helps us make a better product overall. Again, because Sourcegraph is an end-user application with a UI that devs constantly use and care about, we never really had the MongoDB/Redis/CockroachDB risk of AWS/GCP/Azure just deploying our stuff and cutting us out. We're not protecting from downside here, but we are enjoying the upside because now those kinds of distribution partnerships are viable for us. To give a specific example, within ~2 months of making our code non-open-source last year, we signed a $1M+ ARR deal through a distribution partner that would not have happened if our code was open source. This is not our biggest annual deal, but it's still really nice!

We are totally focused on building the best code search/intelligence and appreciate all our customers and all the feedback here. Hope this helps explain a bit more where we're coming from!

replies(6): >>41298979 #>>41299240 #>>41301021 #>>41303956 #>>41305711 #>>41308575 #
4. jsiepkes ◴[] No.41298979{3}[source]
> Sourcegraph CEO here. We made our main internal codebase (for our code search product) private. We did this to focus.

> There were actually very very few companies that were going to pay but then decided to use the open-source version and not pay us. A lot of people probably assume that's why we made this move, but it's not.

> To give a specific example, within ~2 months of making our code non-open-source last year, we signed a $1M+ ARR deal through a distribution partner that would not have happened if our code was open source.

So the reason these deals are now possible is mainly because time was freed up by not having the code base opensource?

replies(1): >>41299012 #
5. sqs ◴[] No.41299012{4}[source]
> So the reason these deals are now possible is mainly because time was freed up by not having the code base opensource?

No, it's that if all the code is free and open source for anyone, we would not be able to charge for it and there would be no deals. Even if, say, 60% of our product was open-source and 40% was closed source, we might still get a lot of direct customers but would struggle to do distribution partnerships because the distribution partners have outsized incentives and capacity to reimplement the subset of the 40% they think their market needs.

replies(1): >>41299201 #
6. rapnie ◴[] No.41299099[source]
> (1) Our super popular public code search is at https://sourcegraph.com/search,

Correction: Public code on Github.

This looks to be restricted to searching Github only.. even though it had "context:global" on the querystring every hit came from Github, and none seen from Gitlab, Codeberg, Sourcehut and other self-hosted forges (e.g. Forgejo).

replies(1): >>41300634 #
7. vundercind ◴[] No.41299201{5}[source]
I believe the question came up because the original rationale given was “we did this to focus”, not “we couldn’t sell the code for as much if it was open source”.
replies(2): >>41299255 #>>41302557 #
8. cdchn ◴[] No.41299240{3}[source]
>Although very very few companies used our open-source version to avoid paying us, we did see it cause a lot of annoyance for devs who were asked by their management to try cloning our product or to research our codebase to give their procurement team ammunition to negotiate down our price. This honestly was just a waste of everyone's time.

Trying to spin that it was "for the devs" is really stretching the bounds of incredulity. We get it, its fine, you have investors to answer to, but come on don't pee on our shoes and tell us its raining.

replies(3): >>41299289 #>>41299499 #>>41299604 #
9. sqs ◴[] No.41299255{6}[source]
Both are factors, as I said in my original post (focus and risk).
replies(1): >>41299329 #
10. sqs ◴[] No.41299289{4}[source]
Fair, I probably didn’t hear from the devs who weren’t annoyed by that. I heard from plenty of devs who were annoyed by it.
replies(1): >>41299474 #
11. vundercind ◴[] No.41299329{7}[source]
“We stopped giving away some of our apples due to risk.”

“Of… liability? Or… uh, what?”

“Oh—risk that we couldn’t sell the apples we gave away, obviously.”

replies(2): >>41299373 #>>41299520 #
12. sqs ◴[] No.41299373{8}[source]
I was thinking business risk. Sorry it wasn’t clear.
13. orochimaaru ◴[] No.41299499{4}[source]
Actually this one I get completely. There’s plenty of places or managers with dev orgs that will check if they can install something complex in house with open source. Nothing wrong with it. But it’s usually a huge waste of time.
replies(2): >>41299761 #>>41299916 #
14. cdchn ◴[] No.41299520{8}[source]
Risking profit. I wish he'd just say it. The mealy mouthed justifications are just so transparently disingenuous.
replies(2): >>41299804 #>>41301054 #
15. breck ◴[] No.41299575[source]
I think the term the industry needs to embrace is "Early Source": https://breckyunits.com/earlySource.html

Make everything public domain, fully open source, just delayed by N years.

replies(3): >>41300322 #>>41300405 #>>41300564 #
16. cxr ◴[] No.41299592[source]
Yet another person equivocating the concepts of publishing code under an open source license and managing a project in public.
replies(1): >>41300591 #
17. Cthulhu_ ◴[] No.41299604{4}[source]
Yeah while I'm sure the developers that were asked to just grab the code and make it work wasn't their favorite job, I think the bigger one is further down - Github developers being tasked with reverse-engineering an open source product to create a closed source clone.

I would've respected GH more if they just used Sourcegraph and instead spent those developers on improving the open source product itself. But, I suspect that Github / Microsoft would then need a locked down license that e.g. Sourcegraph would forever remain open source, or that GH gets free licenses if they ever went closed source, or whatever.

replies(1): >>41299677 #
18. cdchn ◴[] No.41299677{5}[source]
>Yeah while I'm sure the developers that were asked to just grab the code and make it work wasn't their favorite job, I think the bigger one is further down - Github developers being tasked with reverse-engineering an open source product to create a closed source clone.

They don't want Github to clone their product. They weren't doing it for the Github devs.

19. a_t48 ◴[] No.41299724[source]
The open/closed decision is a current weight on my mind right now. Our main competition is an open source product - it feels like it will be a tough sell to not also have the core of the product be free (Robotics framework). I might shoot you an email.
replies(1): >>41303152 #
20. pas ◴[] No.41299761{5}[source]
Why? Getting operational experience with the product that you might then pay a lot for seems very important. Especially if you end up liking the product/service but not the pricing changes that might then happen, so doing some exploratory fact finding for a backup plan doesn't seem to be waste of time.

For example when we used Jira on-prem and it was snappy and we were happy ... and it was a rather important point of difference compared to the slow shitocumulus version.

Also, when people are using GitHub issues to ask questions the problem is usually a lack of clear documentation. (And if spending time to link FAQ answers to potential customers is a waste of time ... then maybe it's not surprising that Sourcegraph CEO is doing damage control on HN instead of focusing on focusing or whatever.)

21. ◴[] No.41299784[source]
22. eutropia ◴[] No.41299804{9}[source]
When someone speaks about business risk for a company which might not be breakeven profitable, the risk is not "we don't make enough money to chuckle sensibly into our wine goblets", the risk is "we have to lay off our engineering team and stop making software altogether".

There's nothing mealy-mouthed about trying to provide insight into their decision-making process. They don't owe anyone other than their employees, customers, and investors (in that order) a justification for their decision making on something like this, and certainly after spilling a few paragraphs of text off the cuff can't be called disingenuous.

This chorus of screeching that accompanies any reduction in commitment for a company involved in open-source is extremely off-putting to anyone who wants to try to build in the open and make a business out of it.

It's free. Gratis. Provided without warranty. Do with it what you will, but it was never yours. They didn't take anything from you by closing the repo. It's really cool that it was available, and it sucks that it's not available going forward - but expecting any business-backed OSS projects to adhere to the same behaviors as a volunteer effort is just wishful thinking.

replies(3): >>41300331 #>>41300562 #>>41301597 #
23. Aeolun ◴[] No.41299916{5}[source]
> But it’s usually a huge waste of time.

Is it? I think at this point my company has probably saved millions of dollars by not paying for subscriptions, but hosting everything in-house. The price point of a lot of these services makes perfect sense when you are small, but paying 1M/year in subscription fees when you can host the same thing for 10k/year is just bonkers. I appreciate that someone has to pay for it for them to continue making the product, but there’s a point where it makes more sense for me to spend a year setting it up (and really only costs two weeks).

replies(3): >>41300441 #>>41302179 #>>41302269 #
24. adhamsalama ◴[] No.41299956[source]
Why not go the SQLite way? Open source but don't accept external contributions. Literally just dump the code.
replies(1): >>41302757 #
25. mort96 ◴[] No.41300159[source]
Huh in what way does publishing a source tarball alongside a release introduce a lot of work, risk and distraction? Your explanation makes literally no sense

EDIT: I implore the downvoters to think about this for a second. You can, actually, publish source code for a project without also committing to providing support and documentation and testing across a variety of systems. Publishing a tarball takes very little time and effort.

replies(1): >>41300233 #
26. collingreen ◴[] No.41300233[source]
Doing a great job on an open source codebase requires a higher level of polish, testing, design, ux, documentation, architecture, and general forethought than internal tools just like any internal vs self serve product.

Only solving your own problems on your own hardware while being able to rely on your own well-informed team to bridge the gaps sounds much much faster and easier to me.

replies(2): >>41300561 #>>41300775 #
27. dudeinjapan ◴[] No.41300322[source]
Will be lovely to have the source N years after AGI terminates humanity.
replies(1): >>41300723 #
28. maeil ◴[] No.41300331{10}[source]
You make good points, but to be fair, I feel it's more the beating around the bush that people take issue with.
29. depr ◴[] No.41300346[source]
I hope code search will one day be offered at a lower price, so small/medium sized companies can use the product. I'll never be able to convince someone to buy it when it's 3 or more time as expensive source code hosting, and would in many cases be most expensive SaaS product per developer seat that the company uses. But it's a great product.
replies(3): >>41300433 #>>41300434 #>>41300526 #
30. ezekg ◴[] No.41300405[source]
There is a term for this, no? https://opensource.org/dosp
replies(1): >>41300689 #
31. prepend ◴[] No.41300433[source]
I feel the same way. It’s really interesting and provides cool insights. But it seems hard to explain to myself to spend more on that than GitHub or IDEs.

I’d like to hear more about the value customers get out of it as I wonder if it’s just groups with unlimited budget.

32. 0x1ch ◴[] No.41300434[source]
$9 to $20 per seat seems pretty average in the grand scheme of SaaS price modelling. I don't work in software development, but IT however.
replies(3): >>41301845 #>>41303030 #>>41321824 #
33. orochimaaru ◴[] No.41300441{6}[source]
My experience was with things like openstack and kubernetes. The org decided to do “cloud” in house first with openstack and then kubernetes - and run critical services on them that had very strict performance SLA.

The amount of time needed to do the whole thing wasn’t worth it. Sure I enjoyed tinkering with the kernel and drivers and k8s. Also diving into known cgroups and namespaces worked etc. However, from a time to market/stability perspective the solution was nowhere comparable to what public cloud providers offer.

Yeah - the subscription costs more. My experience has been that when things get big and hiring gets tense in house solutions just add stress on the devs maintaining it. At least with public cloud services - it’s clearer - if the budget doesn’t exist don’t run it.

I will add that I don’t use sourcegraph nor am I connected with them in anyway. So I’m not batting for their go private strategy. Just commenting on this one point.

34. beyang ◴[] No.41300526[source]
This is in the cards and thank you for the feedback! (Sourcegraph CTO here)
replies(1): >>41312918 #
35. mort96 ◴[] No.41300561{3}[source]
Sure but you can publish the source code while only solving your own problems on your own hardware, you're not required to provide support and documentation just to publish source code...
replies(1): >>41300849 #
36. mistrial9 ◴[] No.41300562{10}[source]
these are good points but there are fundamentals at odds, really.. no amount of "explaining" will make a choice.. there are partisan issues and as said, company survival is related to profitability is related to survival.

also not mentioned so far is - this product has big implications for security by surveillance, with phone-home and instant-audit hooks, non-disclosed search for zero-day vulnerabilities, and more.. by closing the dev process, it appears that this product gets one step closer to a one-way mirror model that some customers will pay really large amounts of money for..

37. mort96 ◴[] No.41300564[source]
Why?
38. nearlyepic ◴[] No.41300591[source]
It has to be disingenuous, right? These concepts aren't complicated. I wish they would just say "we want to make more money" and stop polluting open-source discourse.
39. cqqxo4zV46cp ◴[] No.41300634[source]
I’m sure there are 50 other ways you could categorise all the code that it searches. Nobody said that it exhaustively searches all available open-source code. I’m sure you know that that’s an impossible claim. This isn’t a correction at all. It is, at best, an elaboration. Certainly not worthy of the snark you’re giving. The reality is that GitHub hosts >99% of all open-source source code that anyone really cares about. If you have some philosophical issue with it, that’s fine, but don’t shoot the messenger by attacking individuals.
replies(1): >>41305635 #
40. breck ◴[] No.41300689{3}[source]
Interesting! I hadn't seen that term. Thanks!

I don't like their implementation though. If one thinks from natural principles, one has to reject the idea of licenses on ideas.

Early source is in harmony with nature.

Also "Early Source" rolls off the tongue better than "Delayed Open Source Publication". ;)

replies(1): >>41300758 #
41. breck ◴[] No.41300723{3}[source]
Lol. You could write a sci-fi novel with a world of cyborgs where the age of all cyborgs is N (when they first got access to the source). And primitives are called "Pre-Ns"
replies(1): >>41302341 #
42. yjftsjthsd-h ◴[] No.41300758{4}[source]
> Also "Early Source" rolls off the tongue better than "Delayed Open Source Publication".

Yeah, but nobody will know what "Early Source" means until you explain it, whereas the latter makes perfect sense on first reading.

replies(1): >>41300914 #
43. BaculumMeumEst ◴[] No.41300771[source]
This thread reminded me to finally try Cody, I've been bouncing on and off Copilot for a few months. I wish I knew how good this was sooner, and I had no idea there was a generous free tier.
replies(2): >>41300801 #>>41301154 #
44. yjftsjthsd-h ◴[] No.41300775{3}[source]
> Doing a great job on an open source codebase requires a higher level of polish, testing, design, ux, documentation, architecture, and general forethought than internal tools just like any internal vs self serve product.

Moving the goalposts to doing a great job internally also requires those things. Meanwhile, doing a perfectly fine job of FOSS requires none of them.

replies(1): >>41304219 #
45. jdorfman ◴[] No.41300801[source]
If you (or anyone here) are an open source maintainer, please sign up for free Cody Pro credits https://sourcegraph.com/supporting-open-source
replies(1): >>41300878 #
46. jandrewrogers ◴[] No.41300849{4}[source]
There is a significant intrinsic cost to making code "open source", through the simple act of making that source code available at all. This overhead exists without any regard for what you wish or promise. It invites myriad interactions that cost time and money for little or no offsetting benefit.

Publishing source code, if anyone uses it at all, is not "free" in any sense. I know several people that stopped open sourcing their projects (not even businesses) because the cost of making their code available isn't worth it.

47. BaculumMeumEst ◴[] No.41300878{3}[source]
My most popular repo is just barely under the cutoff, but I can't advertise it because I'll doxx my shitpost account! Damn! I'll try to apply anyways ;)
replies(1): >>41300925 #
48. breck ◴[] No.41300914{5}[source]
There was a time when no one knew what "Open Source" meant.
replies(1): >>41303598 #
49. jdorfman ◴[] No.41300925{4}[source]
Submit it anyway, I'll approve it.
replies(1): >>41300953 #
50. BaculumMeumEst ◴[] No.41300953{5}[source]
Submission sent! Thanks!
51. chubot ◴[] No.41301021{3}[source]
I appreciate this answer -- it clears a lot of things up!
52. OliverGilan ◴[] No.41301032{6}[source]
This seems weirdly hostile. He laid out a bunch of points but you’re grabbing on to this one to make it seem like he’s using classic corporate-speak. Do you find it so unrealistic that the CEO of Sourcegraph has heard from devs that their managers asked them to try to clone or investigate the product before buying? That seems pretty likely
replies(2): >>41301297 #>>41301632 #
53. chubot ◴[] No.41301054{9}[source]
I thought the explanation was very good (second comment more so than the first)

This sounds like "I'm angry I don't get free stuff anymore, and I want to lash out", and I expect better from HN

replies(1): >>41301550 #
54. wesleyyue ◴[] No.41301154[source]
If you're open to trying new AI coding assistants, would love if you can give https://double.bot a try! (note: I'm one of the creators) The main philosophical differences is that we are more expensive and are trying to build the best copilot with the technology possible at any given time. For example, we serve a larger, more accurate, and more modern autocomplete model, but it does cost more to serve. We also do a lot of somewhat novel work in getting the details right, like improving the autocomplete model to never screw up closing brackets, and always auto-close them as if you typed them.
55. HelloNurse ◴[] No.41301297{7}[source]
Investigating Sourcegraph's source code as part of procurement is not only plausible, but useful work that a software engineer should be happy to do.

Stating that making such evaluations impossible is a good thing is therefore more bullshit than other reasons to go closed source.

56. cdchn ◴[] No.41301550{10}[source]
All the arguments are attempts to veil "we're not making enough money."

When companies dangle "open source" projects to get attention, or start off as open source projects then someone decides "I can make money off this", then rug pull them, that leaves a bad taste in my mouth.

replies(2): >>41302059 #>>41302355 #
57. cdchn ◴[] No.41301597{10}[source]
>There's nothing mealy-mouthed about trying to provide insight into their decision-making process. They don't owe anyone other than their employees, customers, and investors (in that order) a justification for their decision making on something like this, and certainly after spilling a few paragraphs of text off the cuff can't be called disingenuous.

When you say things like "we did it for the devs" thats mealy-mouthed and disingenuous. They don't owe anyone but their employees, customers, and investors an explanation, but then they start making public statements-- even if they are a few paragraphs and text off the cuff-- acting like they're doing it for _alutristic_ reasons.

Rug pull your open source once you've gotten what business ends you desire out of it and when it conflicts with your open source goals; like you said its your you own it.

58. hk__2 ◴[] No.41301845{3}[source]
> $9 to $20 per seat seems pretty average in the grand scheme of SaaS price modelling.

"SaaS" is not a feature; you can’t compare products just based on the fact thay they are "SaaS". Gitlab for example brings me far more value than a tool to search my codebase; I wouldn’t put the same amount of money in both.

59. cryptonector ◴[] No.41301859[source]
For business Open source is a business tool. Open source can be a goal, naturally, but for-profit entities have a duty to be profitable (or grow, plowing profits into building). I think there's no shame in saying this. You should not need to be elliptical in your public statements about this move. Everyone knows that this is about protecting your ability to monetize the product, and so it should be, and everyone knows this sort of move comes eventually.
60. int3 ◴[] No.41302042{8}[source]
people can do things for more than one reason
61. chubot ◴[] No.41302059{11}[source]
I don't see any attempt to veil it -- there was specific mention of revenue and competitors

Did SourceGraph make any promises about a community or free support? (honest question)

I think your expectations may be off, perhaps learned from corporate marketing. "Open source" by itself does not mean necessarily

1. you get any support

2. there is a community [1]

3. you're entitled to all future source code by that person or company, whether under the same project name or not.

---

It could be that SourceGraph has broken some promises, and that IS pretty typical of VC-backed companies.

But so far I don't see evidence of that.

Quoting my comment: https://lobste.rs/s/tg5vwi/sourcegraph_went_dark#c_vnaqxu

Even according to Stallman, free software never required any kind of support, open development, or commit history. You can publish a tarball on a web server, and that counts as free software.

i.e. publishing source code doesn’t sign you up for a lifelong obligation. People can fork it, or not fork it.

---

Practically speaking, I might think of SourceGraph as something like Android.

Is Android open source? Yes. [2]

Does it have huge proprietary parts? Yes.

It is designed for collaborative development? Not really unless you work for a big company, and are paid to work on Android. (That said, I'm sure there are hobbyists / "people in their basement" that do meaningful things with Android source code -- and actually I think that is how some open phone companies started)

Is it better than it's open rather than closed? Yes. Multiple competitors to Google use Android source code, e.g. Amazon has built phones off of it. That is good thing IMO.

---

[1] On my own open source projects, there is a community and best-effort support, and I really encourage that! But the point is that there are MULTIPLE valid project models under the name "open source".

Throwing code over the wall is actually valid open source, and it actually benefits society IMO. It's still valuable, even if you STOP doing it, as SourceGraph has done.

It's distinct from "I get free stuff that I like using"

There could be a different name for "unfunded or independently funded open source", but the funny thing is that the term "open source" originated as a corporate-friendly alternative to "free software"

[2] As a tangent, I also think Android has a really suboptimal and cloud-slanted architecture, but for this discussion, let's just use it as a an example of corporate open source

replies(2): >>41303574 #>>41310025 #
62. everforward ◴[] No.41302179{6}[source]
That math only works out nearly that cleanly if you avoid pricing out the engineer time for it.

If you’re paying $1M/year in fees, I would be shocked if you don’t have a whole team to support the open source version. Oncall, system upgrades, the usual stream of tickets about things not working right and people wanting to integrate, etc.

I do believe it can be cheaper to self-host, but I really doubt the difference in cost is 2 orders of magnitude. I’d be surprised if it was a single order of magnitude. I would wager it’s less than the sellers profit margins because of economies of scale; I would guess in the range of 10%-20%.

replies(1): >>41303944 #
63. avianlyric ◴[] No.41302269{6}[source]
Well that obviously doesn’t apply to Sourcegraph because their self-host offering requires paying a subscription. You can’t use any form of Sourcegraph on private code, (at least not without all the important features being nobbled) without paying a subscription. So there’s no saving to be made from self-hosting sourcegraph
replies(1): >>41302922 #
64. avianlyric ◴[] No.41302311{8}[source]
If we ignore the final sentence of his reason, then you might have a point. But given his reason ends with:

> This honestly was just a waste of everyone's time.

Makes it pretty clear that the benefits to Sourcegraph (I.e. not wasting time negotiating with companies acting in bad faith), was a large part of this rationale.

Besides, if you had ever tried using the OSS version of Sourcegraph, you would realise that OSS Sourcegraph is a shadow of its enterprise version. Trust me, Sourcegraph didn’t loose any sales to people running OSS Sourcegraph, and anyone who’s willing to rip out the licensing system, so they can use the enterprise features without paying, obviously isn’t going to become a paying customer either.

65. dudeinjapan ◴[] No.41302341{4}[source]
Not too shabby an idea!!
66. avianlyric ◴[] No.41302355{11}[source]
You clearly never actually looked at Sourcegraph OSS. The OSS version died a very long time ago, the vastly majority of Sourcegraph most valuable features were never OSS, and Sourcegraph has always been very transparent about this.

All that’s changed here is that a non-OSS, but public codebase, is now private. From a customers perspective, nothing material has changed. Only those who want something for nothing are seriously impacted by this.

67. tptacek ◴[] No.41302534{8}[source]
It's both hostile and, worse, boring. I know it sucks to be intrinsically less interesting than someone you disagree with passionately, but it is the case here that the CEO of the company explaining their policy shift is much more interesting than your rebuttals, which seem superficial and rote by comparison.

Someday somebody is going to be intrinsically more interesting about, like, supporting DNSSEC than me (maybe Geoff Huston will sign on and start commenting), and I'm going to want to claw my eyes out. I have empathy for where you're coming from. But can you please stop trying to shout this person down?

68. tptacek ◴[] No.41302557{6}[source]
When a software business makes decisions in the name of "focus", they're usually implicitly saying the "on the stuff that will make the company more money" part. Focus implies product/market fit.
69. cryptonector ◴[] No.41302757[source]
> Open source but don't accept external contributions.

That's not the key to the SQLite model.

The key to the SQLite model is that their 100% code coverage testsuite is proprietary. You can't credibly fork SQLite3 w/o a similar testsuite because everyone knows that SQLite3 has that testsuite and so it's simply better unless your fork has one too.

This works very well for SQLite because it is the single most widely used piece of software ever. And that is because it solves such an important and universal problem (a local DB RDBMS) with such convenience (embedded, server-less).

The reason that SQLite does not accept contributions is not so much that they don't want to, but that contributors can't contribute changes to the proprietary testsuite, and writing those is harder than writing the contribution, therefore contributions impose a big tax on the SQLite dev team that they prefer not to pay.

Very few other pieces of software have similar universal usage/applicability/convenience stories. Therefore it's not easy to apply the SQLite model to all the things.

Sourcegraph could have a business source-available option. If all you want is to be able to be able to debug problems and/or make contributions and you're a paying customer, then why would that not be enough? SQLite is essentially source-available given that you can neither contribute to nor credibly fork it.

70. JamesBarney ◴[] No.41302868{6}[source]
He took the time to write out a detailed explanation of why they made a decision they did. Giving us more transparency than 99% of CEOs or companies. There is a whiff of spin there, but come on compare it to every other product decision ever made and we're getting so much more transparency.

Behavior like this means the next time a CEO will be marginally less motivated to do this. You're shitting in the commons.

71. mdaniel ◴[] No.41302922{7}[source]
> So there’s no saving to be made from self-hosting sourcegraph

That may have been true in the time before LLMs, but I'd argue that any sourcecode exfiltration nowadays runs the very real risk of "oh, sure, we won't use your code for training our model ... wink, wink"

replies(1): >>41303622 #
72. morgante ◴[] No.41303030{3}[source]
Last time I got a quote it was >$5k minimum to use code search.
73. sqs ◴[] No.41303152[source]
Cool! I’d love to chat.
74. cdchn ◴[] No.41303574{12}[source]
>I don't see any attempt to veil it -- there was specific mention of revenue and competitors

Here you go:

>Although very very few companies used our open-source version to avoid paying us, we did see it cause a lot of annoyance for devs who were asked by their management to try cloning our product or to research our codebase to give their procurement team ammunition to negotiate down our price. This honestly was just a waste of everyone's time.

75. yjftsjthsd-h ◴[] No.41303598{6}[source]
After decades, people still barely know what Open Source means[0]; if you can I think it's much better to make things as obvious as possible, like ex. the Creative Commons licenses - nobody has to ask what the "Attribution-NonCommercial-NoDerivatives 4.0 International" license means.

[0] I remain surprised at the number of people, even on HN, who seem to think Open Source is the same as Source Available.

replies(1): >>41304873 #
76. lallysingh ◴[] No.41303622{8}[source]
There's enough open source code available that the hassle of other code probably isn't worth it. LLMs aren't insightful enough to benefit from any differences you'd see between open and closed source code corpii.
77. renewiltord ◴[] No.41303944{7}[source]
Many organizations will accept defacto 90% SLA if internal vs 99.99% If external
78. renewiltord ◴[] No.41303956{3}[source]
Unbelievably generous insight. Nice one, mate. Thanks.
79. collingreen ◴[] No.41304219{4}[source]
I completely disagree - internal tools and high usage, open source, public tools used as marketing serve vastly different purposes and require vastly different workflows. Doing a great job for internal tools can leverage other internal processes, training, access control, implicit understanding, documentation, and aligned workflows. Many issues and bugs can be avoided or papered over and major changes can be forced onto users if necessary because of a shared understanding and a direct communication channels.

A great public codebase likely needs to be more understandable, more generic, more self guided, more error proof, more auditable, and more pluggable. Additionally, supporting popular open source at all comes with a deluge of requests, demands, audits, and obligations.

I expect these two converge as your "internal" consumer base grows big enough but for a small, cohesive team an internal-only codebase seems to me like a much much easier beast to tame.

replies(1): >>41308039 #
80. breck ◴[] No.41304873{7}[source]
Fair points.

> barely know what Open Source means

Perhaps there is no license that makes sense because licenses on ideas do not make sense. You simply cannot define them logically from natural principles without having to concede that they are intellectual slavery. Ideas on licenses have never made sense and never will.

replies(1): >>41305796 #
81. Nullabillity ◴[] No.41305635{3}[source]
sqs isn't a random messenger, he's the person in charge of the decision.
82. Nullabillity ◴[] No.41305711{3}[source]
> - As we've been building Cody (https://cody.dev), our code AI tool, [blahblahblah]

You could have decided not to jump on that bandwagon.

> - It confused devs and customers to have 2 releases

You could have decided not to do that then.

> For various reason, end-user server-side applications just don't get nearly as many contributions.

Maybe it had something to do with the opensource builds being nigh-unusably restricted, turning away anyone who might be interested. Or the confusion that you created between the OSS and freeware builds giving a bad taste.

83. yjftsjthsd-h ◴[] No.41305796{8}[source]
> Perhaps there is no license that makes sense because licenses on ideas do not make sense. You simply cannot define them logically from natural principles without having to concede that they are intellectual slavery. Ideas on licenses have never made sense and never will.

No, the idea is fine - I mean, sure I'd be fine[0] with totally abolishing copyright, but in the world we live in it makes perfect sense. I think it really is just a naming problem, if anything.

[0] Probably.

84. benreesman ◴[] No.41305881[source]
Your product is really cool. Sometimes it makes sense to iterate in this or that repo.

Obligatory: “Victory has defeated you.”

85. mort96 ◴[] No.41308039{5}[source]
> A great public codebase likely needs to be more understandable, more generic, more self guided, more error proof, more auditable, and more pluggable. Additionally, supporting popular open source at all comes with a deluge of requests, demands, audits, and obligations.

Literally none of that is necessary to publish a source code tarball. You keep moving goalposts. You don't need heavy community involvement and support self-hosting and all that just to publish your source code.

I mean feature requests will come, sure, but people working with closed source software receive those too.

replies(1): >>41311049 #
86. conartist6 ◴[] No.41308575{3}[source]
You have, however, left yourself unprotected against real innovation in open source products which are value-aligned
replies(1): >>41308593 #
87. conartist6 ◴[] No.41308593{4}[source]
What I mean is: I totally agree that Sourcegraph's practices and architecture made it seem much more like a closed source company. Once it failed to create an open and welcoming community of contribution and ideas, the path to source closure was likely inevitable
88. mistrial9 ◴[] No.41310025{12}[source]
you have misused the Stallman quote .. the idea is that the code is always available to rebuild and recompile.. the commerce between vendors or users is not specified. In the case you apparently defend, the source code is no longer available to build the complete product.
89. collingreen ◴[] No.41311049{6}[source]
Maybe you're moving the goalposts - the OP took down their very popular, high use open source project that they use as a metering tool because the overhead was too high. My impression from the post and all the comments from the ceo and cto is that they are unwilling to just throw code over the fence without putting enough care into it to make sure it works well and reflects positively on them.

Yes, obviously, it is essentially no effort to just tar a folder and put it on the internet if you do literally nothing else and don't care at all what happens next.

replies(1): >>41314122 #
90. bpmooch ◴[] No.41311564[source]
> (1) Our super popular public code search is at https://sourcegraph.com/search, which is the same product customers use internally on their own codebases. We spend millions of dollars annually on this public instance with almost 1M OSS repositories to help out everyone using OSS (and we love when they like it so much they bring it into their company :-).

If open source wasn't a current marketing fad, you would spend the same amount on other things. You're not doing it because you love open source.

91. hud_dev ◴[] No.41312895[source]
| Sourcegraph CEO here.

Seems like you need to get back to your job of CEOing and leave the public outreach to the folks whose job it actually is? If you haven't fired them all? Any publicity person worth their salt will tell you: shut up. Don't talk. Leave it to the professionals. You're making everything worse.

92. hud_dev ◴[] No.41312918{3}[source]
What would you say...you do here?
93. mort96 ◴[] No.41314122{7}[source]
I'm literally only saying that they didn't need to closed-source it, it's not all or nothing. That's my entire point. I know that maintaining an open source project the way they were doing is a lot of work, but if they want to stop doing that work, they have other choices than "make it closed source".
replies(1): >>41316918 #
94. collingreen ◴[] No.41316918{8}[source]
That's true!
95. depr ◴[] No.41321824{3}[source]
That is Cody (AI coding assistant). Search is 49 per seat.