Most active commenters

    ←back to thread

    209 points mmoogle | 18 comments | | HN request time: 0.001s | source | bottom
    Show context
    ntqz ◴[] No.44608949[source]
    I could see the writing on the wall with this.

    On that note, I'm already looking at migrating my codebase off of Spring. Just testing the waters with Quarkus, Helidon, Micronaut, Pekko, Vert.x, and plain Jakarta EE right now.

    replies(3): >>44609703 #>>44610521 #>>44611297 #
    1. _1tan ◴[] No.44609703[source]
    Are there any indications or just a feel?
    replies(1): >>44609844 #
    2. bags43 ◴[] No.44609844[source]
    Company where I work had huge risk audit.

    The second highest risk is using USA based cloud with 66/100.

    The first one was using Spring Boot everywhere 77/100. Till the end of 2025 we need to have migration path to something else with 2 PoCs done.

    replies(4): >>44609971 #>>44610952 #>>44611105 #>>44611548 #
    3. jchmbrln ◴[] No.44609971[source]
    I’m completely out of the loop. What’s going on with Spring Boot?
    replies(2): >>44610003 #>>44610074 #
    4. radicalbyte ◴[] No.44610003{3}[source]
    The VMware apocalypse.
    replies(1): >>44610028 #
    5. heisenbit ◴[] No.44610028{4}[source]
    One does not need VMware for SpringBoot so?
    replies(3): >>44610087 #>>44610088 #>>44610090 #
    6. xienze ◴[] No.44610074{3}[source]
    Probably a bit of overreaction given that Broadcom is now in charge of Spring. At the end of the day it’s a wildly popular open source project — it has a path forward if Broadcom pulls shenanigans.

    That said, I have noticed that the free support window for any given version is super short these days. I.e. if you’re not on top of constantly upgrading you’re looking at paid support if you want security patches.

    7. xienze ◴[] No.44610087{5}[source]
    Spring’s corporate steward is VMWare, and Broadcom bought VMWare, ergo Spring is subject to Broadcom’s whims.
    8. TYMorningCoffee ◴[] No.44610088{5}[source]
    VMware owns Spring Boot https://en.m.wikipedia.org/wiki/Spring_Boot
    9. loloquwowndueo ◴[] No.44610090{5}[source]
    Not spring boot, but spring, is owned by VMware. Sure spring is under a free license but if upstream enshittifies, community forks would be required.
    replies(2): >>44611037 #>>44614624 #
    10. jcrben ◴[] No.44610952[source]
    What was the actual risk of using SpringBoot tho?
    replies(1): >>44611817 #
    11. mindcrime ◴[] No.44611037{6}[source]
    And as popular and widely used as Spring is, that would 100% happen. To me at least, I wouldn't count this as a particularly huge risk. But in an enterprise setting, with mandatory auditing and stuff, I can understand why there would be a requirement to at least pre-identify alternative(s).
    12. ◴[] No.44611105[source]
    13. somehnguy ◴[] No.44611548[source]
    What's the actual risk though? Just saying it's the riskiest at 77/100 doesn't mean anything.
    replies(1): >>44615352 #
    14. ntqz ◴[] No.44611817{3}[source]
    License changes - BSL or closing the source

    If there's no money in it for them - reduction of staff or funding leading to slower releases and bugfixes

    Moving some features like Spring Cloud / Spring Integration, or new development behind a paywall (think RHEL)

    Big users (like Netflix, Walmart, JPMorgan, LinkedIn/Microsoft, etc) would likely be able to pay for it (until they moved off), but smaller companies and individual developers not so much

    replies(1): >>44614069 #
    15. bbkane ◴[] No.44614069{4}[source]
    I think it would be more of a Redis situation - steward changes the license, someone large enough to maintain a fork creates one, and everyone moves to the fork. In Redis's case, Amazon forked it into Valkey.

    Spring is so widely used that there are multiple "large enough" companies who could do this

    16. terminalbraid ◴[] No.44614624{6}[source]
    > Not spring boot, but spring, is owned by VMware

    How do I reconcile this statement with VMWare holding the copyright which you will find unambiguously littered in the official Spring Boot repository?

    Since you contend the contrary, who does in fact hold the copyright?

    replies(1): >>44615159 #
    17. ◴[] No.44615159{7}[source]
    18. bags43 ◴[] No.44615352{3}[source]
    Among others:

    - license change -> restricting features behind a paid tier (https://spring.io/blog/2025/04/21/spring-cloud-data-flow-com...)

    - reducing headcount of people -> slow security patching + not following industry standards

    - all eggs in one basket :)

    - cut from major clouds (Azure Spring apps)