• 4 Posts
  • 608 Comments
Joined 1 year ago
cake
Cake day: December 13th, 2024

help-circle


  • Open source exists just fine without anonymous contributors, and the value difference between closed source is not that contributors can be pseudonymous or anonymous, it’s that anyone can be a contributor.

    I am an open source maintainer. I do not want unfettered anonymous access to submit things to my repositories. I welcome feedback, criticisms, bug reports, feature requests, pull requests, and support requests, but I do not want any of that from anonymous users. If someone abuses me or other members of my open source communities, I want there to be potential recourse.

    Anyone on earth is welcome to download my code and do whatever they want with it (as long as they follow the license terms) completely anonymously, but I do not welcome communications from them anonymously. I don’t feel like that’s unreasonable, and I’m happy that GitHub is a place where I can have those kind of restrictions.

    If you want a more “Wild West” approach to social coding where anonymous users can submit things to your repos, you’re free to host your projects elsewhere.


  • You’re just wrong if you think the most valuable people to an open source project are anonymous randos.

    I would think it would be astoundingly obvious that the most valuable people are the core team members. They do all of the maintenance work. They guide the project’s direction and define its mission. They implement new features and do most of the bug fixing. They triage, handle releases, coordinate.

    Look at the commit stats of any major project; there are a handful of people who do >90% of the work. Those are the most valuable people to open source. They are who keep these projects going year after year.

    Anonymous randos might fix a low-pri bug once in a while, but they don’t actually help a project much. It’s vastly more likely that anonymous randos will just add more work to a core dev’s plate and provide nothing of value. Now, please note that I’m not talking about new devs. Plenty of new devs will start by submitting some bug fixes to help projects. Those are actually helpful. I’m talking about randos. People who go by new pseudonyms not tied to any established Internet presence. And this problem has only gotten exponentially worse with AI.

    I’m assuming, from the way you talk about it, that you’ve never been a part of a large open source project‘s community. You should try it. It’s extremely rewarding work (in that it makes you feel accomplished, you will not be paid for it). You’ll see that the work you label as busywork is actually what makes the project both valuable and maintainable.

    I actually run some large open source projects:

    https://github.com/hperrin/svelte-material-ui

    https://github.com/sciactive/pnotify

    And a bunch of smaller ones:

    https://github.com/sciactive/tinygesture

    https://github.com/sciactive/nephele

    https://github.com/sciactive/nymphjs

    https://github.com/hperrin/stream-overlay

    https://github.com/sciactive/quickdav

    So I’m speaking from experience here.

    Just to give you an example, if you look at the v9 branch of SMUI, you’ll see the work I’ve been doing on it lately to separate it from the upstream library that has been abandoned. All of that work will not change the outward utility of the project one bit from v8, but it is absolutely necessary if the project is going to continue into the future. This kind of work will always fall on a core dev. No random passerby is ever going to do weeks of grinding labor just to make sure the project has a path forward.

    So yes, the occasional bug fix or performance improvement from an anonymous stranger is nice, but no, it is not necessary nor the most important part. And to me not worth opening the project up to potential unaccountable abuse from bad actors.