An Open Source License That Requires Users to Do No Harm

China uses facial recognition technology to track Uyghur Muslims. The US military uses drones to kill suspected terrorists —any nearby civilians. US Immigration and Customs Enforcement—which has locked children in cages near the Mexican border—relies on software for communications and coordination, like all modern organizations.

Someone had to write the code that makes all of that possible. Increasingly, some developers are calling on their employers and the government to stop using their work in ways they believe are unethical. Google employees convinced the company to stop its drone footage analysis work and cancel plans to bid on a cloud computing contract with the Pentagon. Microsoft employees have protested the company'swork for ICE and the military, though with little success thus far.

But it's hard to stop a company or government from using software that it already has, especially if that software is open source. Last month, for example, programmer Seth Vargo deleted some of his open source code from online repositories to protest its potential use by ICE. But because open source code can be freely copied and distributed, his code was soon back online elsewhere.

Coraline Ada Ehmke wants to give her fellow developers more control over how their software is used. Software released under her new " Hippocratic License " can be shared and modified for almost any purpose, with one big exception: "Individuals, corporations, governments, or other groups for systems or activities that actively and knowingly endanger, harm, or otherwise threaten the physical, mental, economic, or general well-being of individuals or groups in violation of the United Nations Universal Declaration of Human Rights.”

Defining what it means to do harm is inherently contentious, but Ehmke hopes that tying the license to existing international standards will reduce the uncertainty. The declaration of human rights "is a document that's 70 years old and is pretty well established and accepted for its definition of harm and what violating human rights really means," she says.

It's a bold proposal, but it's exactly the sort of thing Ehmke is known for . In 2014 she wrote the first draft of a code of conduct for open source projects called the "Contributor Covenant." She was met with skepticism at first, but more than 40,000 open source projects have adopted it, ranging from Google's artificial intelligence platform TensorFlow to the Linux kernel.

For now, few are using the Hippocratic License. Ehmke herself isn't even using it yet. It still needs to pass a legal review, for which she's hired a lawyer, and there are plenty of potential pitfalls, such as compatibility with other licenses, to be addressed. But Ehmke says the license is less about getting people to use it, and more to start a conversation about ethics in open source and programmers’ control over their work.

Ehmke acknowledges that changing the way technologists license their work won't in and of itself stop human rights abuses. But she wants to give technologists a tool to inhibit companies, governments, or other bad actors from using their code while committing those abuses.

The nonprofit Open Source Initiative says open source software "must not discriminate against any person or group of persons" and "must not restrict anyone from making use of the program in a specific field of endeavor."

Whether human rights violations qualify as a "specific field of endeavor" under that definition is something of an open question, because Ehmke hasn't formally submitted the Hippocratic License to the OSI for review. But in a tweet last month , the organization suggested that the license doesn't fit its definition of open source. OSI cofounder Bruce Perens also wrote on his blog that the license conflicts with the organization's definition.