Bonum Certa Men Certa

Black Duck Debunked Again, Data Asserted Invalid

Summary: Black Duck's GPL-hostile numbers are hinged on a biased collection of data, claims controversial columnist Byfield

JUST before Christmas we wrote this critique of Redmonk because it was using data from its former paymasters at Black Duck. The data was used to discredit the GNU GPL, a cornerstone of copyleft (which in inherently one of the biggest threats to the likes of Microsoft, which is in turn closely connected to Black Duck).

"No article is perfect, but the takeaway from Byfield's article is that Black Duck's claims deserve no trust."An article from Bruce Byfield (excerpt in [1]), a person whom we typically disagree with (he tends to aggravate projects or sites and then malign them using their response, i.e. the troll's modus operandi), finally disputes the Black Duck 'data', which is in some case derived directly or funneled through Microsoft (for over 5 years now). Byfield criticises "both the Red Monk studies and their main source, Black Duck Software," noting quite correctly that the way data is collected is biased by designed (incomplete and tilted in favour of large corporations such as Microsoft).

While we cannot agree with all of Byfield's assertions, some of his points align with ours and bolster critics of Black Duck, including Debian heavyweight Bruce Perens, who warned people that Black Duck's claims about the GPL are "B.S."

Will Hill, a Debian user, has highlighted numerous flaws in Byfield's article, including:

Oh no, he's dredging up all that bullshit again? It was pretty conclusively dealt with at the time by counting packages in Debian, etc. Let me count the howlers,

Because permissive licenses are more flexible and less likely to generate compliance problems, the possibility is strong that these sources could have a conscious or unconscious bias against copyleft licenses.

That's basically what Black Duck was trying to get people to believe, that software freedom is not "flexible" enough for businesses who prefer "permissive" BSD. This is silly and wrong, but he's stated as a fact. What a turkey.

Debian, for example, notes that its license "include" a short list but makes no guarantee that the list is complete, and goes no further than to note that a half dozen licenses are "common."

This undermines people's ability to see the best rebuttal in a dishonest way. The answer came from counting the total number of packages and the number of GPL packages to see that GPL use had increased.


No article is perfect, but the takeaway from Byfield's article is that Black Duck's claims deserve no trust. They are selling agenda and bias.

Related/contextual items from the news:


  1. The problem with license trends
    The conventional wisdom is that free software licenses are rapidly evolving. The copyleft licenses are supposed to be in decline, and the permissive licenses gaining popularity, according to two widely-quoted studies from Red Monk by Stephen O'Grady and Donnie Berkholz, In fact, writing in 2012, Berkholz declares that new project licenses are more likely to use a permissive license than anything else. However, on closer examination, whether these conclusions are accurate is open to question.

    For one thing, both the Red Monk studies and their main source, Black Duck Software and its Open Hub site (formerly Ohloh) are business-oriented. Because permissive licenses are more flexible and less likely to generate compliance problems, the possibility is strong that these sources could have a conscious or unconscious bias against copyleft licenses.


Recent Techrights' Posts

Gemini Links 07/09/2026: Music Composition, Free Stuff, and Self-hosting Git Repos
Links for the day
Silent Layoffs, Cool-down, and Cool-off: How GAFAM and IBM Operate (the Law Doesn't Apply to Them)
Laws? What laws?
 
Getting Better After 20 Years
Exactly two months from now this site is turning 20
EPO Hiding Cocainegate and Abandoning Transparency (Even Access to Very Basic Information is Denied)
The EPO isn't just becoming like a private for-profit corporation. It's also becoming more secretive.
Richard Stallman Has Resurrected Lost Updates
We didn't ask about it
SLAPP Censorship - Part 174 Out of 200: Cascading Scandals and a Path Towards Much-Needed, Long-Awaited Reform
Reform the UK's law, not "Reform UK"
EPO's Gema Requena Sempere (PD People) Contacted Regarding Children With Disabilities
In the coming week we may be in fruitful contact with some media regarding EPO scandals
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 06, 2026
IRC logs for Sunday, September 06, 2026
People Who Enforce the GPL Banned From Linux Foundation Board (After Bribes From Prolific GPL Violators), Now They're Banned From Giving Talks at Events
about the "LF" ('Linux' Foundation)
Gemini Links 06/09/2026: The Slop Plagiarism 'Holy War' (Hype, Scam, Scheme), Burning CD-Rs, and Hardcopy Mono
Links for the day
Solicitors Regulation Authority (SRA) Inaction and Incompetence - Part IV - Insufficient Resources in the Face of Distributed Denial of Service (DDoS) by Lawyers
it's about 120KG
OpenStreetMap is the Future, Dictatorship is the Past
OpenStreetMap helped us check maps for transport, various overlays with addresses, and there was 0% reliance on GAFAM or "Google" anything
How Strikes at the European Patent Office Are Seen by Striking Staff in Berlin, Germany
We have some more EPO scandals to cover later this year and next year
Association for Computing Machinery Cites Techrights in Relation to GemText and Gemini Protocol
published yesterday, Open Access
Links 06/09/2026: More XBox Trouble (Microsoft Unrest, Many Silent Layoffs This Month), John Duffy as Next USPTO General Counsel
Links for the day
Gemini Links 06/09/2026: Avoiding 'Smart' 'Phones' and Setting up Gemini for the First Time
Links for the day
Links 06/09/2026: Sabotage by Slop and "What Happens If 'Open' 'AI' Dies?"
Links for the day
How Back Doors Became the 'Normal' or 'Norm'
"We also allowed a lethal monoculture to fester"
Solicitors Regulation Authority (SRA) Inaction and Incompetence - Part III - The SRA is Vastly Worse Than Brits Realise, We Have a "Wild West" in London
In the next part we'll begin looking at correspondence with the SRA
SRA and Manslaughter: How the SRA Contributed to Agony in Proprietary Software Scandals With Clear Misuse of "Without Prejudice"
Trying to prevent the public from finding out the criminal stuff that went on, resulting in many deaths
Canonical (or Ubuntu) Rejecting IRC Isn't the Widespread Trend
Internet Relay Chat (IRC) adoption still growing by some yardsticks
SLAPP Censorship - Part 173 Out of 200: Two Years
It was exactly 2 years ago that we filed lawsuits against Garrett
Linux of America
We could not help but notice GNU/Linux in North America yesterday
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 05, 2026
IRC logs for Saturday, September 05, 2026
Gemini Links 06/09/2026: Internet Limiting (Limited Time Allotted) and Solar MiniServer
Links for the day
Eight Months of Strikes in EPO, Organised by the Staff Union (SUEPO) Also in Berlin
In Berlin, only one member of staff voted against the action plan
Links 05/09/2026: "Let’s Stop Buying New Phone" and 'Open' 'AI' (Proprietary Slop) Drowning in Lawsuits
Links for the day
Gemini Links 05/09/2026: Polarization, Warped Maps, and Emacs rectangle-number-lines
Links for the day
Software Freedom, Even If Difficult to Attain Due to Outside Pressure, Does Make You Happier
Peer pressure and opinionated employers can make friends and staff more miserable if they dictate bad software
You Can Run GNU/Linux on a Desktop/Laptop for 1,000+ Days Nonstop
To me, the long uptime is a way of "marketing" GNU/Linux as robust and stable
Profiting From Global Warming (and Making More Money the More You Cause Warming)
Unregulated bank and pyramid scheme
SLAPP Censorship - Part 172 Out of 200: The Solicitors Regulation Authority (SRA) Complicit in the SLAPPs by Inaction (Didn't Even Study Any Evidence, Only Wasted Time and Budget)
"SRA placed into special measures due to 'disappointing standard of leadership'"
China Does Not Need American (US) Products Like GAFAM's
China has abundance of technical things it can leverage to preserve its autonomy
RMS Didn't Make Enough Backups
Making backups is important
Refresher: Why EPO Staff is on Strike This Year (Aside From the EPO Acting Like a Corrupt, Above-the-Law, For-Profit Corporation That Violates Its Own Charter)
One core issue at the EPO is erosion of purchasing power
Gemini Links 05/09/2026: Fireflies, Shore Pine, and ASCII Art
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 04, 2026
IRC logs for Friday, September 04, 2026