this post was submitted on 23 Jan 2025
68 points (95.9% liked)

Programming

18439 readers
395 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 2 years ago
MODERATORS
 

As in title, my company is seeing a huge uptick in abusive messages from Anaconda.com seeking licensing revenue.

They're hitting many people across the org with legal threats - many with zero control of whether a person uses conda or not. I don't use it in my job at all, and neither do my teammates.

FWIW - we're a small-ish growing startup that just recently crossed the 200 employee line. Our product is a database often used for AI and there are many packages within the Anaconda ecosystem that are owned by us, not them. So I don't know why they'd be hounding us for licensing since the primary reason we'd use conda is to contribute to conda - not consume it.

It's starting the conversation of needing to drop conda support for future releases. If they're going to be this utterly vile, then why would we spend the effort packaging for them?

It's gotten so bad that I've made FTC complaints over this. I'm tired of the near daily threats for something I have zero control over.

If anyone else is experiencing this, I highly recommend reporting the abusive comms to the FTC here - https://reportfraud.ftc.gov/ - also forward the emails to your HR/Legal team so they know to contact the state AG.

all 20 comments
sorted by: hot top controversial new old
[–] [email protected] 18 points 1 month ago (1 children)

Anaconda Inc is terrible. I recommend mamba + conda forge but I don't package stuff.

Glad you're filing a complaint, and I hope others do as well. My experience with them as vendors of enterprise data science server software was quite disappointing.

[–] [email protected] 3 points 1 month ago (1 children)

Miniforge should be defaulting to use conda-forge. Perhaps an old installation is configured to use the Anaconda inc maintained defaults channel.

Conda-forge.org provides a guide to rid your environments of the defaults channel.

https://conda-forge.org/docs/user/transitioning_from_defaults/

[–] [email protected] 2 points 1 month ago

Thanks for this! I wasn’t aware a good independent fork of all of this had been set up (I’d kinda forgotten about conda-forge).

[–] [email protected] 18 points 1 month ago (2 children)

It's all about your organization's size and if the organization makes use of the Anaconda controlled defaults channel. I'm not a lawyer, but your company may be liable for some licensing fee if your company is using Anaconda's repository of binaries. You'd need to consult with an actual lawyer for more reliable assessment of your potential liability.

Switch to using miniforge and the conda-forge channel when installing and using Conda.

[–] [email protected] 15 points 1 month ago (2 children)

Sure. I can agree that my company would be liable. But the company isn't mine. I just work here. And my team doesn't use any conda stuff at all.

Essentially, I am being personally threatened of a lawsuit even though I have no ability to make a licensing or purchase decision.

That just doesn't sit right with me.

[–] [email protected] 16 points 1 month ago

I didn't read your post correctly. Yeah, that's harassment at the very least. No better than someone screaming at a retail worker because of some corporate policies.

[–] Nomecks 13 points 1 month ago (1 children)

Send the emails to your company's legal team. It's not your fight.

[–] [email protected] 13 points 1 month ago

Send the emails to your company’s legal team. It’s not your fight.

Already did, and agreed. I also asked the legal team if they could ask Anaconda.com to stop contacting me and threatening me personally. We shall see what happens.

[–] [email protected] 9 points 1 month ago (2 children)

While I’m sure it was inevitable, especially in today’s climate, it saddens me to see Anaconda (and conda by extension I presume) go down like this. When they first came out it was such a breath of fresh air in the Python ecosystem.

I’m not sure in the details, but what’s the point in relying at all on any of their infrastructure? Is any of it independent enough?

[–] [email protected] 4 points 1 month ago (1 children)

The real kicker is that I'm fairly sure we aren't really using them at any real scale - if we do it's to demo our product within the context of AI development. So if anything, they get a lot of free press when we do that. If they're gonna throw a fit over it, I'm sure we can work with some other "AI" company (that's what they bill themselves as) that wants the free marketing. Heck, I can't imagine the anaconda ecosystem working out if they keep threatening the developers that enrich that ecosystem.

[–] [email protected] 1 points 1 month ago

Oh I get you, and it’s an insight into the priorities and operation of the company. They’re clearly worried about snaring all of the “free loaders” as they move to a more extractive business model. And so there’s probably a bunch of people with licence quotas hounding anyone they can.

[–] [email protected] 4 points 1 month ago (1 children)

Conda itself is outside of Anaconda, Inc's control.

[–] [email protected] 2 points 1 month ago

What about the package repos and conda forge? Apologies, it’s been a while since I paid attention to them (and Python packaging too). Does conda work well just against PyPI?

[–] [email protected] 3 points 1 month ago* (last edited 1 month ago)

Keep in mind that you actually do have control over what you and your reports use for software and their license compliance. Otherwise not your problem. Beyond that, it is an issue for legal anyway and management.

[–] [email protected] 1 points 1 month ago (1 children)

200 employees is medium sized, not smallish. And how is it still a startup?

[–] [email protected] 8 points 1 month ago

I'm not here to discuss the nuances of a startup versus medium sized company. Suffice it to say that much of the organization still views itself as a startup. Even though yes, you are right, it's a medium sized organization.

[–] [email protected] 1 points 1 month ago (1 children)
[–] [email protected] 4 points 1 month ago* (last edited 1 month ago) (1 children)

Yes, I am aware.

I'm more asking if others are getting a wide spread of threatening messages across the org - even if they don't regularly use conda/anaconda.

It's like everyone glossed over "I don't use it in my job at all, and neither do my teammates" bit.

[–] [email protected] 1 points 1 month ago* (last edited 1 month ago)

didnt put it for you specifically, I didnt know about this and found this while searching. thought others might find it useful. otherwise I agree it is stupid they dont go to something like a legal or hr department but harass teams directly (even if they were using it imo). they might be thinking along the lines "lets pester their teams, they will take it up with whatever the relevant department is"