HashiCorp's switch from MPL 2.0 to BSL 1.1 prompted 140+ companies and 700+ individuals to sign the OpenTF manifesto. The community forked Terraform as OpenTofu under the Linux Foundation (33,000+ GitHub stars). HashiCorp was subsequently acquired by IBM for $6.4 billion.
Sources: Spacelift analysis
PACKAGE_LICENSE_MISMATCH detects license change between versions.
| Tool | Verdict | Details |
|---|---|---|
| OSS Risk Guard | Caught | PACKAGE_LICENSE_MISMATCH detects license change between versions. |
| Socket | Missed | No license change monitoring |
| Snyk | Missed | Scans current license only; no change detection |
| Sonatype (Nexus) | Missed | Scans current license only; no change detection |
| Black Duck | Missed | Scans current license only; no change detection |
| Endor Labs | Missed | Scans current license only; no change detection |