Microsoft Says Open Source Is Nothing without the Source Code

As far as Microsoft is concerned, the availability of the source code and open source solutions are an integral part of the same recipe. The Redmond company proved this point as it pulled down the Sandcastle project from its open source project hosting web site: CodePlex. The move came following complaints indicating that Microsoft Sandcastle available for download via CodePlex under the Ms-PL license did not came completed with the source code, despite the fact that Sandcastle was listed as an open source project.

"This is unacceptable and represents a violation of Microsoft's Open Source policy. I take it extremely seriously," stated Sam Ramji, Director, Microsoft Open Source Software Lab. The Microsoft Permissive License was approved in the past by the Open Source Initiative as an open source license, and it automatically involves delivering access to the source code. Microsoft had failed to do so with Sandcastle.

"I apologize to the OSI on behalf of Microsoft for this mistake," Ramji stated. Microsoft immediately took action, in order to resolve the issue. "I have directed the project to be unpublished from Codeplex immediately, including removal of the project's use of the Ms-PL. If the team chooses to publish the source code and follow Microsoft policy, then the project may be re-published in the future. If not, we will remove all references to Sandcastle from Codeplex," Ramji added.

At this point in time, the Sandcastle project is no longer available for download from Codeplex. According to Ramji, Microsoft is looking at two options. The company will either make available the source code along with Sandcastle, or will deliver the binaries for download, but not under the Ms-PL open source license.

"We are strengthening our controls on Codeplex projects and the governance process that we use for Microsoft-led external projects to ensure that this type of error does not happen again. Our policy regarding use of the term Open Source is clear: Open Source refers to projects using OSI-approved licenses," Ramji concluded.