Comments on: Black Duck Software Gets $9.5 Million To Help You Ship Better Software More Quickly

By: Stem Lee

Mon, 02 Mar 2009 18:03:34 +0000

Get it?

By: Crisis como las de Silicon Valley son las que necesitamos por aquí Loogic.com

Crisis como las de Silicon Valley son las que necesitamos por aquí Loogic.com — Fri, 13 Feb 2009 11:14:31 +0000

[...] 9,5 millones de dólares de inversión en la empresa de desarrollo de software Black Duck. [...]

By: The meltdown: Where we are, where are we going (Jarrett House North)

The meltdown: Where we are, where are we going (Jarrett House North) — Wed, 11 Feb 2009 14:39:45 +0000

[...] and foreclosures abound, for sure, and there are people who are hungry. But there are still venture deals happening (albeit with existing portfolio companies) and companies are still hiring. So what’s going [...]

By: RG

RG — Tue, 10 Feb 2009 18:00:38 +0000

There are a ton of OSS licenses. So yes, in general it is free for you to use. But if you are including it in a product that you plant to sell, it may not be totally free for that use. This is true of the GPL. If you inadvertently include GPL code in your product, then you need to open your code to the public. If this was not your plan, you need to know before you ship GPL code in your product.

That’s what BD does.

By: LR3

LR3 — Tue, 10 Feb 2009 15:46:38 +0000

Forgive me for being ignorant, but could someone post a link or explain why you would need to scan open-source code? Just like the poster above stated, I thought open-source was free? Therefore there shouldn’t be any worries of infringement… right?

By: links for 2009-02-09 (Jarrett House North)

links for 2009-02-09 (Jarrett House North) — Tue, 10 Feb 2009 02:01:06 +0000

[...] Black Duck Software Gets $9.5 Million To Help You Ship Better Software More Quickly Congrats to Black Duck for their fourth round. Any funding in this market is to be commended. (tags: entrepreneurship opensource) [...]

By: Michael Kimsal

Michael Kimsal — Tue, 10 Feb 2009 01:38:44 +0000

What about if *you* didn’t write the code?

What about if *you* have something to hide in the code?

Do you even understand what BlackDuck does?

It’s attitudes like yours that scare people enough to buy BlackDuck and similar services in the first place.

By: Stem Lee

Tue, 10 Feb 2009 00:31:10 +0000

Wow.

By: Robin Wauters

Tue, 10 Feb 2009 00:10:48 +0000

Err, no. Also, did you miss the fact that Red Hat also participated in the round?

By: lemonobrien@yahoo.com

lemonobrien@yahoo.com — Mon, 09 Feb 2009 23:19:08 +0000

this is stupid; open source is free; and if you code like me, why would you ever want to use some fucked up service to help you go through the code; if you can’t go through the code, then you shouldn’t be a developer.

why do VCs just piss their money down the drain.

By: Michael Kimsal

Michael Kimsal — Mon, 09 Feb 2009 22:41:09 +0000

I did those types of audits for companies for a bit, and BD reports (late 2007) were just full of false positives. Occasionally missed real positives too (not often) but having to rely on a ‘clean bill of health’ from BD on its own would just be crazy. You have to have some external consultants (handily BD provides those too!) to interpret and analyze the results. Good business model, I guess.

By: 複雑化するライセンス管理を簡単・迅速化するBlack Duck Softwareが$9.5Mを調達

複雑化するライセンス管理を簡単・迅速化するBlack Duck Softwareが$9.5Mを調達 — Mon, 09 Feb 2009 22:26:10 +0000

[...] ［原文へ］ [...]

By: Jean-Tristan Chanegue

Mon, 09 Feb 2009 22:12:02 +0000

How do you think they’ll use this new founding ?

By: Kiran

Kiran — Mon, 09 Feb 2009 21:37:28 +0000

Our company acquisition was not completed until we passed the licensing checks with Black Duck. When you are acquiring a company every month Black Duck can be quite a bit handy.

By: Michael Kimsal

Michael Kimsal — Mon, 09 Feb 2009 21:31:13 +0000

I used BlackDuck on a few occasions, doing consulting for a company re: risk management of open source software. The BD system would scan code and report on potential matches or points of concern.

Perhaps it’s gotten better in the last year, but I found it to be

a) extremely slow
b) extremely cumbersome
c) not well documented
d) something that generated a whole lot of data, but not useful information
e) something that generated a lot of false positives

Again, maybe it’s better now? I doubt it, cause they’ve got no real competition.

I do remember being impressed with the idea of VS and Eclipse plugins that could scan your code and warn of violations during development, rather than scanning code that was already done. *That* seems useful. However, it would require a lot of training to get rid of the false positive for each and every company using it.

By: Jason

Jason — Mon, 09 Feb 2009 21:23:59 +0000

“Black Duck Software is a global provider….” exactly how big is the global market for managing free code?

By: Jason

Jason — Mon, 09 Feb 2009 21:22:39 +0000

They seriously had $38.5M of funding? Thats just mad, really mad.