Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)A
Posts
1
Comments
1511
Joined
3 yr. ago

  • As a sporadic foss contributor and foss advocate, I ain't even installing your shit if the only install option is curl pipe to shell.

    And I also do think it's a red flag exactly like the original poster was looking for.

  • Exactly, it's a shift in responsibilities from the developers of a thing to the users of that thing.

    As a grunt at work and a mid-tier "money haver" at best, I'm tired of having everything shift its costs onto me and it's a red flag that prevents me from installing and running a software package.

    Everything around nowadays does this shift if they can get away with it.

    I have to set limits on what I tolerate to achieve what gain or the world will leave me dead with a giant tire mark across my chest.

  • Eh, I'd be more sympathetic if there weren't a dozen different alternatives to making this exclusively how people install your software.

    It's a virus delivery system waiting to happen. Especially now when you have AI that can help you stand up an imposter site quickly and easily.

  • This is the sort of thing you do to big companies with no morals, doing it to a small open source project is just wrong, they don’t have the manpower or money to redo the investigation you already did.

    Given that the dude works for an AI-based security company, and Forgejo and services like it (e.g., codeberg.org) are how you abandon the mess of vibe-coded trash that is GitHub, in my opinion, he has a motivation to pick apart this specific service.

  • It's almost like it really fucking sucks.

  • Is that what he's eating?

  • That fucking unicorn error page haunts my dreams.

  • Yeah I've never cared enough to check and don't own any of her merch but you're probably right in this specific case.

  • Band T-shirts are sometimes --- or even often --- the highest quality T-shirts available. Many bands bother to make sure that the stuff they sell is 100% cotton, fair trade, etc. I think I even have some that were made by union labor.

  • I'm shocked and appalled that my addition of "do NOT make any mistakes!" didn't singlehandedly make the word guessing technology underneath perfect.

  • Other lawmakers are assholes that don't care about you in the slightest.

  • says the pedophile

  • Yeah, just like all movies are 3d now.

  • The maggots and the MAGA choir, everyone!

  • The secretary of war crimes everyone

  • Us blockading it too has to be one of the stupidest things I've ever seen, and I live in America so I see stupid shit daily.

    YOU CAN'T HIT ME IN THE BALLS! I'LL JUST HIT MYSELF IN THE BALLS!

  • Deleted

    Permanently Deleted

    Jump
  • And since javascript libraries tend to be so small and focused

    Lol, LMAO even

  • 👏 👏 👏 👏 👏 👏 👏 👏 👏 👏 👏

  • Deleted

    Permanently Deleted

    Jump
  • But Windows is less secure. Two things can be true at once. They are in the original topic too.

    The Java ecosystem is massive and decades old and I don't hear one iota of the shit about maven central that I hear about npm.

    I guarantee that npm is full up with vibe coded bullshit at this point as well.

    I'm not sure what it even takes to upload a package to npm. Not even a pulse. I honestly never looked into it because the whole ecosystem is so rancid.

    EDIT: Look at how many shits in this are optional (and note the overall quality of the article as well): https://dev.to/aneshodza/publishing-your-first-npm-library-51k2. The ecosystem sucks.