Source-Available License & Governance Risk Report 2026
FW Delta examines license changes, governance, patch continuity and fork capability of critical infrastructure components and delivers an operational License Bill of Materials.
- First published
- 29 July 2026
- Data cutoff
- 29 July 2026
- Methodology
- weighted license/governance risk index plus case studies, timeline and LBOM
- Objects examined
- 6 ecosystems; 7 risk dimensions; 11 timeline events; 6 fork capabilities
Key findings
- OBSERVED Several infrastructure-relevant projects changed their license or added new license options in recent years; this gave rise to forks, new foundation models and altered procurement decisions.
- CALCULATED In the disclosed model, CockroachDB 24.3+ reaches 72/100, MongoDB Community Server 63/100, Terraform/HashiCorp BSL 45/100, the MariaDB BSL reference model 42/100, Redis 38/100 and Elasticsearch 26/100. Higher means more modeled procurement risk, not worse software.