Re: How to handle contributions from anonymous?

From: pbristow_at_[hidden]
Date: 2019-09-27 09:07:09

> -----Original Message-----
> From: Boost <boost-bounces_at_[hidden]> On Behalf Of Hans Dembinski via
> Boost
> Sent: 27 September 2019 01:06
> To: Boost Devs <boost_at_[hidden]>
> Cc: Hans Dembinski <hans.dembinski_at_[hidden]>
> Subject: [boost] How to handle contributions from anonymous?
> 
> Hi all,
> 
> I got a PR from a contributor who prefers to remain anonymous. The person
> created new files and instead of putting a real name, the person added just
> initials. I am talking to the person to see whether they can be convinced to give a
> real name.
> 
> Any advice on how to handle this? My feeling is that a copyright notice without a
> real name is illegal.
> 
> I could publish the code in my name, but then a documented transfer of copyright
> from the contributor to me is missing, which then puts me in a vulnerable
> position.
> 
> Any thoughts?

Boost long established practice is to require a named author making a copyright claim.

(A reason for this is to avoid the (admittedly tiny) risk of someone later claiming copyright and then accusing Boost of abusing their copyright and causing big trouble with all users lawyers).

We have no way of knowing if an alias is real?  https://en.wikipedia.org/wiki/William_Sealy_Gosset is an honorable example 😉

But an email kept by you transferring copyright from 'anon' to you might be a way of keeping the author anonymous?

That may still leave 'anon' vulnerable if he wants to keep his contribution secret from his employer (who prohibits publication without their authorisation) , for example, but in practice it would be OK.

For a PR, I'd be tempted to just put your name on the copyright claim.

FWIW

Paul

Paul A. Bristow
Prizet Farmhouse
Kendal, Cumbria 
LA8 8AB           UK