The Rug Pull Ledger: A Field Checklist for When Free Software Starts Acting Expensive

Let's be honest about what keeps happening. A plucky open-source tool wins hearts, gets adopted into thousands of production stacks, and then — usually on a Tuesday, usually effective immediately — the license changes, the cloud tier appears, and the community discovers it was never really in charge. HashiCorp did it. Redis did it. Elastic did it before un-doing it. Sentry did a version of it. This isn't bad luck. It's a playbook.

And like most playbooks, it leaves fingerprints. If you've been burned once, you start seeing the tells everywhere. Here's the ledger we keep in the lab — seven signals that a project you love is being groomed for a payday, ranked roughly by how much they should worry you.

1. The Foundation Shuffle

When a project announces it's "joining a foundation," read the fine print on which foundation and when the IP transfer actually closes. Sometimes it's genuine community stewardship. Sometimes it's an exit-liquidity event where the founders cash out contributor goodwill right before the commercial pivot. The timing between the transfer announcement and the next funding round is the tell.

2. Maintainer Headcount Goes Weird

Healthy projects accumulate maintainers gradually. A sudden influx of full-time, salaried contributors from a single company — especially when that company just raised a Series B — isn't community growth. It's a payroll. Check the commit metadata: if the last fifteen meaningful merges come from one corporate domain, the community is now an audience.

3. Telemetry Creep

Nobody ships telemetry all at once. It starts as an opt-in crash reporter, becomes an opt-out "product improvement program," and ends as phone-home behavior buried three config layers deep. Telemetry isn't just about privacy — it's market research for a future cloud product. They're measuring which features are load-bearing before they put a paywall under them.

4. The Roadmap Pivots Toward the Cloud

Watch what features get prioritized after the money arrives. If development energy shifts from the core open-source artifact toward an "enterprise control plane," a managed offering, or features that only make sense in their hosted version, the free product is being deprecated in slow motion. Nobody announces this. The commit history announces it.

5. License Language Lawyers Start Lingering

The strongest leading indicator, in our experience. When the project's issue tracker fills up with discussions about BSL, SSPL, or "fair code" licensing — before any change is announced — the legal review is already done. Public license debates are almost never exploratory. They're rehearsals.

6. Docs Start Splitting into Two Products

A quiet but reliable tell: the documentation gains a subtle fork. There's the community docs, and then there's the platform docs, and the latter keeps getting better while the former accumulates stale screenshots. Documentation budgets are honest in a way press releases aren't. Follow the docs spend.

7. The Community Manager Hire

This one sounds paranoid until you've watched it happen twice. When a project with a scrappy Discord suddenly hires a professional community lead whose background is developer marketing, the goal is no longer community — it's sentiment management ahead of an announcement. The community is being prepped for a breakup.

Scoring the Signals

One signal alone means nothing. Projects hire, grow, and yes, occasionally make money — that's fine, that's even good. The pattern that should move you to action is convergence: three or more of these landing within a twelve-month window, especially following a funding announcement.

Our lab policy is simple. Anything load-bearing in production gets a quarterly license review and a fork-feasibility assessment — could we actually maintain this ourselves if the rug pulls? If the honest answer is no, we either reduce the dependency or accept the risk with eyes open.

Open source was supposed to be the antidote to this kind of thing. In practice, it's become the top of the funnel. That doesn't mean you opt out — it means you stop being surprised. The rug pull is a business model now. Treat it like one.