On
                2019-01-03 7:05 a.m., Richard Monson-Haefel wrote:
              
              MP, on the other hand, is new and
                has been running as an agile process since its
                beginning.  Why change that?  My question is: Why is it
                so essential that MP adhere to the EFSP?  Why is that
                required?  The only one that can answer that, as far as
                I know, is Mike Mlinkovich who I've CCed on this email.
              Indeed. 
              
              Eclipse MicroProfile has been enormously successful.
                From its start in late 2016 it has quickly evolved to a
                well-recognized set of industry specifications with
                numerous independent commercial implementations. The
                roots of this success come from its agility. Rapid
                iteration of the specifications developed under a low
                ceremony process has pushed MicroProfile forward at a
                great pace. But there is no disputing that MicroProfile
                is a specification, meant to be implemented by
                others. It is not a single open source project like
                Spring.
                
                However, the very success of MicroProfile means that
                legal issues become a greater concern. In particular,
                the status quo could potentially expose the Eclipse
                Foundation, its members, and implementers of the
                MicroProfile specifications to unnecessary risk. There
                are no legal problems with MicroProfile that we know of
                at this time, so now is the perfect time to take steps
                to mitigate the risk of such problems arising in the
                future. Without getting into too much detail, the legal
                risks from the current situation could arise from things
                like: no formal participation or membership model, no
                licensing of patents from contributors to independent
                implementations, and no formal compatibility model. The
                low ceremony process also increases the risk that
                royalty-bearing IP could be inserted into
                specifications, exposing the entire MicroProfile
                ecosystem to IP litigation. 
              
              The reason why formal specification processes exist is
                because there could be real legal liabilities associated
                with specifications. The formality of specification
                processes have evolved to mitigate those risks. 
                
                In addition, since the MicroProfile specification
                process was established, the Eclipse Foundation has
                created an Eclipse Foundation Specification Process. So
                we now have specification projects hosted at the Eclipse
                Foundation which do not conform to our specification
                process. To be clear, MicroProfile is not the only group
                that we are having this conversation with. For example,
                the Eclipse Tahu
                project is the home of the Sparkplug specification. We
                are working with them to establish a working group which
                will utilize the EFSP.
               For the reasons above, we are stating that the
                MicroProfile project has risk mitigation issues that
                must be addressed. There are many potential solutions to
                these issues, and we look forward to working with the
                MicroProfile community to come to a solution that best
                meets the needs of the community, the implementers of
                the MicroProfile specifications, the MicroProfile
                ecosystem, and the Eclipse Foundation. 
              
              
              
                
                
                
                
                  
                    
                      
                           
                       | 
                      
                         
                          This email has been checked for viruses by
                          Avast antivirus software.  
                          www.avast.com
                         
                       | 
                    
                  
                
                
                  
             
            _______________________________________________