As you can easily notice, today many open source projects are using some services, that are… sus.

For example, Github is the most popular place to store your project code and we all know, who owns it. And not to forget that sketchy AI training on every line of your code. Don’t we have alternatives? Oh, yes we have. Gitlab, Codeberg, Notabug, etc. You can even host your own Gitea or Forgejo instance if you want.

Also, Crowdin is very popular in terms of software (and docs) translation. Even Privacy Guides and The New Oil use Crowdin, even though we have FLOSS Weblate, that you can easily self-host or use public instances.

So, my question is: if you are building a FLOSS / privacy related project, why using proprietary and privacy invasive tools?

  • cmnybo@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    132
    arrow-down
    1
    ·
    6 months ago

    A lot of people use Github because it’s easy to use and popular. Not everyone wants to self host, although it would be nice if the larger projects did. What I really hate is when open source projects use something like disord for support.

    • hperrin@lemmy.world
      link
      fedilink
      arrow-up
      35
      arrow-down
      16
      ·
      6 months ago

      I run a fairly popular open source project called Svelte Material UI, and I can tell you why I use Discord for support. My users want me to use it. GitHub too.

      People want to use what they already have, and most people, even developers, don’t care that much about privacy. I would gladly self host a support forum, but tons of people would rather use a different library than sign up for my personal support forum. And the people who really care about privacy wouldn’t trust my self hosted solution either, so there isn’t really a better option than Discord, as much as that sucks.

      • cmnybo@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        69
        ·
        6 months ago

        When support is hidden away in discord, web searches can’t find it. Nobody can even look through it without having an account.

        • hperrin@lemmy.world
          link
          fedilink
          arrow-up
          12
          arrow-down
          11
          ·
          edit-2
          6 months ago

          I agree that it sucks. I would much rather use a more open platform. But my users don’t want that. Discord is convenient, people want convenience, and I want to give my users convenience (even if it means I have to answer the same questions once in a while).

            • hperrin@lemmy.world
              link
              fedilink
              arrow-up
              11
              arrow-down
              3
              ·
              6 months ago

              Sure, but I’ve actually had people ask me to set up a Discord, and no one has ever asked me to set up anything else.

              • Kusimulkku@lemm.ee
                link
                fedilink
                arrow-up
                7
                arrow-down
                1
                ·
                6 months ago

                I wonder if they just pass on the project since the documention is hidden away. I know I’ve done it a bunch of times

              • justme@lemmy.dbzer0.com
                link
                fedilink
                arrow-up
                4
                ·
                6 months ago

                Yeah, I gave up long ago to suggest ppl some alternatives. The problem PPL Here have is the discord only thing. With tools like matter bridge you could combine several tools seemlessly, but that is of course way to much trouble for smaller projects.

                • toastal@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  6 months ago

                  Having the ability to bridge doesn’t mean you always should… you are now exposing folks to Discord’s data collection + ToS as well as all the inevitable spam that flows into these rooms.

          • AnyOldName3@lemmy.world
            link
            fedilink
            arrow-up
            3
            arrow-down
            1
            ·
            6 months ago

            If past support questions showed up in searches, then more users would be able to help themselves and would never need to ask for support, so it wouldn’t matter as much what platform it happened on.

            Personally, I think it would be good if support discords were all bridged to matrix spaces (currently doable, but matrix needs locking down more than discord to stop spam as the tools to prevent and remove it are worse) and the matrix history was archived somewhere search engines could index it like mailing list archives are (currently not doable). That approach would let users use what they want without forcing anyone else to, and keeps self help as easy as it was in the days of forums.

            • hperrin@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              edit-2
              6 months ago

              Typically, what I’ll do is if multiple people ask the same question or need the same guidance, I’ll put it in the readme or the “Quick Guide” section of the demo site. If anyone knows a solution to make the discord server publicly viewable/searchable though, I’d happily implement it.

              Right now, if you have a Discord account, you can join and view the server, and post in the support channel and forum. Maybe there’s a Discord bot I could set up to mirror the content.

              • AnyOldName3@lemmy.world
                link
                fedilink
                arrow-up
                1
                ·
                6 months ago

                I’m thinking more for the scale of something like OpenMW, as we’ve got more frequently asked questions than we could hope to put on an FAQ page. In the olden days, stuff showed up from our forums when people googled it, and now it doesn’t, so we get loads of questions through Discord, and very rarely one from Matrix.

      • refalo@programming.dev
        link
        fedilink
        arrow-up
        1
        ·
        6 months ago

        I can’t even use discord at all because it forces me to verify with a phone number as soon as I sign up, every single time, no matter what ISP/browser/etc. I use.

      • toastal@lemmy.ml
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        edit-2
        6 months ago

        Whose voices can you listen to when all of your communication options are closed? Of course the ones already on the proprietary plaforms are more okay with it. If you are worried about folks not trusting your host or sign ups, choose a decntralized service so no one has to trust it or sign up.

        • hperrin@lemmy.world
          link
          fedilink
          arrow-up
          3
          ·
          6 months ago

          Right next to the Discord link is my Mastodon link, and no one has ever reached out to me there asking for other platforms.

          • toastal@lemmy.ml
            link
            fedilink
            arrow-up
            2
            arrow-down
            1
            ·
            edit-2
            6 months ago

            That’s a shame. It’s rare, but I have been reached out to before by way of email, IRC, XMPP, & Matrix. Mastodon tho isn’t a messaging app, but a migroblog that doesn’t have a good messaging UX (or encryption)… I usually dig around for an email before I would reach out over Mastodon since it’s not often the right platform.

            Do you follow the project & see post about it that aren’t specifically @-ing you? I did this about a small TUI app two weeks ago in a vent, & the dev reached out to me & I immediately joined the IRC where they helped me resolve my immediate issue.

            This could also be a front-end focus thing… where the average user is on a Mac & uses Twitter than the audience for TUI mail.

            • hperrin@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              edit-2
              6 months ago

              I have my email available too. It’s certainly easy to get ahold of me outside of Discord and GitHub.

              I feel like what you need to understand is that most people use closed source, commercial services and don’t care about avoiding non-privacy centric services. It’s not like a this kind of developer/that kind of developer thing. You and I are a rare kind of people, even in the developer community.

              If I focused on only providing support through privacy focused venues, I would be excluding the people not willing to sign up for those things, which is a vastly larger group than you might think. Much larger than the group of people who wouldn’t sign up for Discord. Additionally, it’s harder to moderate spam on open, federated platforms. So I’d be adding more work for myself that will take up time I could be using to develop SMUI.

              I understand why people want to advocate for privacy focused and federated services. I want to too. But my goal as an open source maintainer isn’t to cater to those people or advocate for something like Matrix, it’s to help my users.

              And yes, I search around the web once in a while to see what people are saying about SMUI outside of the official channels.

              • toastal@lemmy.ml
                link
                fedilink
                arrow-up
                1
                ·
                edit-2
                6 months ago

                I think there is a disconnect on what folks want to use, what they know they can, & what they actually use. I have talk to a lot of ‘normies’ that do value their privacy (else Apple would not try to turn it into a marketing point), but they don’t understand the alternative or how much data is truly getting leaked. Sure there are the I just use what’s convenient type but when you compare A to B, so long as B has most of the features they rely on or can work around will take the one with better privacy.

                For me, I feel as a software maker, I have a duty to advocate for these freedom-focused platforms since I have a better understanding of how software & data collection works. I have friends that ask for suggestions around these thing since they know I can be a trusted authority on what might actually be best for their data, or even making compromises on something not ideal like Signal (or Matrix). Additionally, if I believe that if my projects are worthy of free or otherwise moral software, I want to practice what I preach & use/support those services–and the values they represent by making sure the freedom of users are respected too. I would even go so far as to hedge that the types of users that care about tech in this way are more likely to pitch in & be closer-knit than the fly-by, can’t-be-asked-to-use-anything-but-Discord type.

                As for spam, I am in one PL IRC chatroom, & it gets flooded from spam from the Discord bridge. I would say popular platforms have a greater chance at spam than one that is less popular–in the way Linux has less viruses, not due to vastly superior architecture, but less users.

                Ultimately, it’s not that I don’t see your point of meeting the users where they are instead of making the change you want to see in the world (or maybe you don’t care that strong for doing that sort of thing), but fundamentally I disagree with that sort of compromise. …Now to the point that if a project only offers Discord, I outright dismiss it as not having values that align with mine & will seek an alternative, even if it’s worse or has a smaller community.

                • hperrin@lemmy.world
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  6 months ago

                  You know, my code is open source. You’re welcome to fork my project and run your own version with a privacy centric support forum. Maybe you’ll be successful.

                  You’re partly right though. I care more about serving my community than proselytizing to them. Not that I won’t proselytize to them, but it’s far more important to me to make sure they can use my software library for their projects than to make sure they use only privacy centric services.

                  I’ve dealt with a lot of people like you, who want to shame me for the decisions I’ve made. I’m pretty thick skinned, so it’s not going to push me away from the open source or privacy centric communities. But it does push some people away, so you should change to a different tactic. It’s kind of like the difference between telling someone how bad they are for eating meat vs telling them how easy and tasty certain meat alternatives are. One of those methods is basically guaranteed to backfire.

    • devraza@lemmy.ml
      link
      fedilink
      arrow-up
      14
      ·
      6 months ago

      I hope this changes (even if a little bit) once Forgejo (FLOSS Gitea fork) adds forge federation.

      • taladar@sh.itjust.works
        link
        fedilink
        arrow-up
        10
        arrow-down
        1
        ·
        6 months ago

        Federation doesn’t really solve the issue that self-hosting takes effort away from working on the actual project.

        • Max-P@lemmy.max-p.me
          link
          fedilink
          arrow-up
          20
          ·
          6 months ago

          No but it does solve people not wanting to bother making an account for your effectively single-user self-hosted instance just to open a PR. I could be up and running in like 10 minutes to install Forgejo or Gitea, but who wants to make an account on my server. But GitHub, practically everyone has an account.

          • Dessalines@lemmy.ml
            link
            fedilink
            arrow-up
            7
            ·
            6 months ago

            This is the main reason why we haven’t moved lemmy’s repo there (yet). Most of the devs are on board with leaving github tho at some point.

          • taladar@sh.itjust.works
            link
            fedilink
            arrow-up
            4
            ·
            6 months ago

            I could be up and running in like 10 minutes to install Forgejo or Gitea

            You could maybe do that but only because you already know how unlike most developers and you completely dismiss any active maintenance like updates, moderation, debugging performance issues, resizing storage,…

            • Max-P@lemmy.max-p.me
              link
              fedilink
              arrow-up
              3
              ·
              6 months ago

              The whole point is you can take the setup and maintenance time out of the equation, it’s still not very appealing for the reasons outlined.

          • toastal@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            6 months ago

            ForgeFed solves a storage issue with Forgejo too… no Git object dedup means that the storage starts to balloon if you require all patches be in the form of pull requests on your server.

    • FQQD@lemmy.ohaa.xyz
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      2
      ·
      edit-2
      6 months ago

      I don’t mind if they have a support discord, as long as they have a better alternative available

  • Max-P@lemmy.max-p.me
    link
    fedilink
    arrow-up
    64
    ·
    6 months ago

    There’s been a general trend towards self-hosted GitLab instances in some projects:

    Small projects tend to not want to spin up infrastructure, but on GitHub you know your code will still be there 10 years later after you disappear. The same cannot be said of my Cogs instance and whatever was on it.

    And overall, GitHub has been pretty good to users. No ads, free, pretty speedy, and a huge community of users that already have an account where they can just PR your repo. Nobody wants to make an account on some random dude’s instance just to open a PR.

    • verdigris@lemmy.ml
      link
      fedilink
      arrow-up
      21
      arrow-down
      3
      ·
      6 months ago

      GitHub (since the Microsoft acquisition) is good to users because that’s their MO, it’s called Embrace, Extend, Extinguish, and the whole point is to centralize users and projects and make them dependent on the Microsoft ecosystem.

      Of course now there’s also the whole issue of Copilot, which means any code you put on GitHub could very well show up piecemeal in someone’s AI-generated code. If it wasn’t for that novel avenue of monetization, you can bet your ass GitHub would have already made the free user experience a lot shittier.

      • toastal@lemmy.ml
        link
        fedilink
        arrow-up
        4
        ·
        edit-2
        6 months ago

        Micosoft also owns npm, Windows, Azure, Office, Outlook, Teams, & LinkedIn—MS GitHub is not just Copilot, but Sponsors & Codespaces. The whole overarching goal is to integrate all this data & make support between these products is prioritize with little upsells inside the apps, & get you hooked on the ecosystem… neo-EEE.

    • WolfLink@lemmy.ml
      link
      fedilink
      arrow-up
      3
      arrow-down
      3
      ·
      6 months ago

      You can host a git repo with little effort on any Linux machine you can ssh to. You don’t need to host a git lab instance unless you want some web gui.

  • dsemy@lemm.ee
    link
    fedilink
    English
    arrow-up
    61
    ·
    6 months ago

    Network effect.

    Using GitHub as an example, choosing any alternative (as a small project) will reduce the amount of contributions and will make the project less discoverable. Especially if you consider projects where the technical barrier for contribution is lower, it is much more likely for a potential contributor to have an account on a “mainstream” platform.

    I used to think that this was less of an issue in more niche communities, but a recent post by an Emacs package developer (Protesilaos Stavrou, won an FSF award a few years ago) changed my mind: https://protesilaos.com/codelog/2024-04-30-re-emacs-github-freedom-microsoft/

    • e$tGyr#J2pqM8v@feddit.nl
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      6 months ago

      That makes sense. But what about big ongoing projects/ Couldn’t they easily migrate to a FOSS service? I’d imagine people will look out for them specifically no matter where they’re hosted.

  • bloodfart@lemmy.ml
    link
    fedilink
    arrow-up
    41
    ·
    6 months ago

    Because most oss maintainers are more afraid of their work disappearing due to service shutdowns than they are being profiled by data miners.

    Everyone has seen some example of a tool or resource hosted on a persons private server end up taken down because they couldn’t afford it, the isp or university stopped offering hosting or because they simply couldn’t keep doing it due to death or old age.

    That’s what people who create software are afraid of. The loss of that creation, not the loss of the privacy of people who contribute to it or download it.

    • toastal@lemmy.ml
      link
      fedilink
      arrow-up
      9
      ·
      6 months ago

      Remember when we used to have mirrors as standard practice? If it is just text, it doesn’t use much space to serve someone else’s code too (no, your README does not need images, video, etc.). Besides, every node in a DVCS is a technically a mirror, it’s just decentralized collaboration is a lost art to many.

  • OsrsNeedsF2P@lemmy.ml
    link
    fedilink
    arrow-up
    34
    arrow-down
    7
    ·
    edit-2
    6 months ago

    Because most of us want projects with users, and there’s a lot more users on GitHub and Discord than Gitea and Matrix

    • chebra@mstdn.io
      link
      fedilink
      arrow-up
      34
      arrow-down
      4
      ·
      6 months ago

      @OsrsNeedsF2P But that’s the problem we need to fix, not the reason to give up. There will be more people on Gitea and Matrix if you try. There is also more people on Reddit and Twitter, yet here we are.

      • tyler@programming.dev
        link
        fedilink
        arrow-up
        38
        arrow-down
        2
        ·
        6 months ago

        If you try. Have you ever maintained any sort of large FOSS project? Have you ever run infra for FOSS? Even if you control your own DNS, you somehow became your own Domain Name Registrar, you bought the fiber all the way to your internet backbone provider, you are still compromising somewhere. For those of us that actually maintain and run foss projects it’s a massive pain in the ass. There’s nothing to “give up”. It’s all about using your personal resources wisely. I can’t spend time trying to get gitea up and running when I can quite easily use GitHub and lose absolutely zero functionality. And it’s not like any project I put on GitHub is somehow worse off than on gitea, they’ll function exactly the same since I only use MIT licensing.

        • Gina Häußge@discuss.tchncs.de
          link
          fedilink
          arrow-up
          15
          arrow-down
          1
          ·
          6 months ago

          I wish I could upvote you more than once.

          It all really comes down to making choices that make the most use of the extremely limited resources (time, money, spoons) you have as a maintainer.

          • chebra@mstdn.io
            link
            fedilink
            arrow-up
            4
            arrow-down
            14
            ·
            6 months ago

            @foosel If that is the case, then how did the choice of using an open-source license even get through? It sounds like you are confusing commercial thinking (we have to get more users, we have to be where the users are, we have to support them, we have to meet the KPIs…) with the open-source. You don’t have to do any of those.

            • Gina Häußge@discuss.tchncs.de
              link
              fedilink
              arrow-up
              16
              ·
              edit-2
              6 months ago

              You misunderstood me. My reason isn’t “get more users”. My reason is “my day only has 24h and maintenance itself is a full time job, without adding on hosting, administration, etc for code repository or communication infrastructure”.

              I have to choose my fights if I don’t want to burn out. I’ve been a full time maintainer for 10 years now, 8 of those self employed.

              That being said, I do in fact self host a web forum for my project (which I can only do because I have a volunteer admin taking care of the day to day and a whole ton of mods helping with moderation), and I do have a nightly mirror of everything on the project’s GitHub org to my private NAS just in case.

              • chebra@mstdn.io
                link
                fedilink
                arrow-up
                3
                arrow-down
                13
                ·
                6 months ago

                @foosel But why do you feel like you “have to” do those things? Are you paid for it? Are you trying to sell the project? Are you looking for VC funding? Is someone threatening you if you stop fighting those fights? Those are all things from the commercial mindset, or things exploited by Jia Tan. Of course everybody likes when a project is maintained, good quality, free, but that should come from the cooperation and from the freedoms in the license and platform, not from your personal sacrifice

                • Gina Häußge@discuss.tchncs.de
                  link
                  fedilink
                  arrow-up
                  14
                  ·
                  6 months ago

                  Welcome to the real world, where open source maintenance should be a lot of things but instead boils down to a whole lot of personal sacrifices by maintainers. I don’t like this either, and do what I can to improve it, but that’s a slow process. Idealism is nice, but it doesn’t help here.

                  And why do I do this to myself? Because I believe in open source and because I want people to have free access to good tooling. Currently I can afford to do this thanks to crowd funding of my work. I would never accept VC funding.

                  Kindly stop insinuating that I’m a turbo capitalist corporate drone, it’s insulting and absolutely ridiculous.

        • chebra@mstdn.io
          link
          fedilink
          arrow-up
          1
          arrow-down
          2
          ·
          6 months ago

          @tyler Also note how you went from “we want projects with users” to “oh it’s so hard to provide services to so many users”… at least stick to your argument. One thing is for sure - actively keeping users away from open platforms is not going to increase the users on these open platforms. Doesn’t take a genius to figure that out. Do what you want, I’m just pointing out that you seem to be working against yourself.

          • tyler@programming.dev
            link
            fedilink
            arrow-up
            3
            ·
            6 months ago

            @tyler Also note how you went from “we want projects with users” to “oh it’s so hard to provide services to so many users”… at least stick to your argument. One thing is for sure - actively keeping users away from open platforms is not going to increase the users on these open platforms. Doesn’t take a genius to figure that out. Do what you want, I’m just pointing out that you seem to be working against yourself.

            I literally didn’t make any of these arguments. You’re just setting up several strawmen to attack. And no, I’m not working against myself. Using non-OSS software has nothing to do with ‘working against’ FOSS software. I can all but guarantee you use non-OSS software every single day which was the actual point I was making and you so conveniently ignored. Whether it’s the software that runs the car you drive, or the software for the train you take to work, or the software in your cell phone, there is lots of necessary non-FOSS software out there and you’re completely ignoring that any given person’s time and energy can only be spent on so much.

        • chebra@mstdn.io
          link
          fedilink
          arrow-up
          0
          arrow-down
          2
          ·
          6 months ago

          @tyler So why are you doing open source anyway, if not for the philosophy? You are completely undermining that by forcing your contributors to stick to proprietary walled gardens. Last time I checked there were hosting providers for both gitea and matrix.

          • tyler@programming.dev
            link
            fedilink
            arrow-up
            4
            ·
            6 months ago

            @tyler So why are you doing open source anyway, if not for the philosophy? You are completely undermining that by forcing your contributors to stick to proprietary walled gardens. Last time I checked there were hosting providers for both gitea and matrix.

            none of my users have to use any walled gardens. My final artifacts are pushed up to the respective artifactory like npm, maven central, rubygems, pypi, etc. all of which are artifact repositories set up by non-profit foundations that anyone can use. You are talking about being open to contributors, which is an entirely separate thing from users. I’m not forcing anyone to contribute, and no one is forced to use my projects. I can pretty much guarantee I’ve contributed to more OSS in the past year than you have in a lifetime, and it’s going to continue to be that way for the foreseeable future. So you can fuck right off

            • chebra@mstdn.io
              link
              fedilink
              arrow-up
              0
              arrow-down
              2
              ·
              6 months ago

              @tyler Did you just break some code of conduct by telling me to F off? For what exactly? Arguing for open source software here on the open source community? Interesting…

      • magic_lobster_party@kbin.run
        link
        fedilink
        arrow-up
        6
        ·
        6 months ago

        Reddit and Twitter aren’t comparable here. I’m not bound to the fediverse just because I post here. I can still use Reddit if I want. I don’t care much if my posts aren’t seen by anybody here either.

        Code hosting is a different story. It’s not ideal to host on both Github and Gitea at the same time. It’s a mess to keep track of multiple issue trackers at the same time. If you chose one you’re kind of bound to it, so you better choose the alternative that increases the chances of future success of the project.

        • devraza@lemmy.ml
          link
          fedilink
          arrow-up
          6
          arrow-down
          2
          ·
          6 months ago

          You could host on Gitea and mirror to GitHub. Obviously, users may be less inclined to sign up to your Gitea instance, but I hope people being unwilling to register becomes less of an issue once Forgejo (Gitea fork) implements forge federation.

            • toastal@lemmy.ml
              link
              fedilink
              arrow-up
              1
              ·
              6 months ago

              Especially the issue tracker as thats where folks’ thoughts are being recorded. Many issue will come from non-developers—which if you are going to make them create an account somewhere, would you sleep better at night know you aren’t subjecting those wishing to pitch in to the ToS & data collection machine of Microsoft? Microsoft GitHub doesn’t even let you see collapsed comments unless you are autheticated.

      • ThyTTY@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        6 months ago

        You are right but also assume people care about that. Lots of time open sourcing your project is a way to collaborate with others, build a portfolio or just for fun. It’s not a statement.

  • Otter@lemmy.ca
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    1
    ·
    6 months ago

    Usually because resources are limited, both financial and time, so people make do with what they can.

    As projects grow, and as the FOSS alternatives improve, projects can switch over.

    • JustMarkov@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      3
      ·
      6 months ago

      Usually, that isn’t happening and big projects just stay at Github, which is kinda sad.

  • h3ndrik@feddit.de
    link
    fedilink
    arrow-up
    24
    arrow-down
    2
    ·
    edit-2
    6 months ago

    I see Github as a mere tool. As I could use a proprietary operating system like Windows on my development computer, I can use Github to distribute the code. It doesn’t have that severe consequence to the open source project itself and works well. And it’s relatively transparent. Users can view issues etc without submitting to Microsoft. And it’s been the standard for quite some time.

    I’m far more concerned with FLOSS projects using platforms like Discord, which forces their users to surrender their privacy and that actively contribute to the enshittification of the internet. I wouldn’t want to be part of that.

  • XNX@slrpnk.net
    link
    fedilink
    arrow-up
    22
    ·
    6 months ago

    Codeberg is relatively new, gitlab sucks, I’ve never heard of notabug. That’s why. People want their open source projects to be found and contributed to so using what the most popular makes sense. Although i do love codeberg and I’m glad it’s being worked on so well.

  • estebanlm@lemmy.ml
    link
    fedilink
    arrow-up
    24
    arrow-down
    3
    ·
    edit-2
    6 months ago

    Well, keeping an infrastructure like github is very expensive. Other solutions like gitlab are no real solution as gitlab itself is also not completely FOSS. Codeberg is a relatively new kid in the block, and sustainability in the long term is still not proven. Gitea/Forjego requires you to selfhost your repositories and that’s something not everybody can afford/take the time to do.
    So, we have a situation of a standard de facto, when one company took the space and constitued a monopoly, forcing the users to use it or be invisible otherwise.
    So, there you have the reason: visibility in a market dominated by just one actor.
    How to fight this situation? There is no much way as individuals, a partial solution is to use a FOSS solution and then mirror on github for visibility. Of course this is limited as individual solutions wont change collective problems, but FOSS groups doing the same are no longer individuals but communities so with time we may have a way to get out…

    EDIT: s/go/get

    • iopq@lemmy.world
      link
      fedilink
      arrow-up
      10
      ·
      6 months ago

      Codeberg seems cool, even though I saw it go down a little while ago. I still believe the internet wants to be free. There’s no guarantee GitHub won’t eventually start charging for more things.

      • Dessalines@lemmy.ml
        link
        fedilink
        arrow-up
        6
        ·
        6 months ago

        I like codeberg, but they also removed a torrent project I was working on because it didn’t comply with german law. Kind of unavoidable when you use any centralized service, especially in a country that’s severely anti-piracy.

      • estebanlm@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        6 months ago

        Oh, I agree with that (I use a selfhost solution -gitea- myself). I was just pointing to what I think is the current situation and why is like that :)

    • fruitycoder@sh.itjust.works
      link
      fedilink
      arrow-up
      3
      ·
      6 months ago

      Gitlab is still a better step in the direction. You at least have a path to using FOSS instances.

      Gitlab working on federation along with Forgejo is big step in the right direction.

  • Zerush@lemmy.ml
    link
    fedilink
    arrow-up
    15
    ·
    edit-2
    6 months ago

    Not only that FOSS use GitHub and other proprietary hosts, they even in much cases contain APIs of Google, M$, Amazon, Fakebook & cia, APIs also offered as FOSS by Big Brothers. Since these companies have entered the world of OpenSource, what was previously considered free software is becoming more and more perverted.

    It’s ridiculous when I want to use an OpenSource service where an account is necessary, most of the time a window appears with the kind offer to log in with a Google or Facebook account or that this service send data to googleanalytics, googletagmanager and Alphabet, like ocurres with an account in Mozilla.

    Time to update and redefine what free software should be.

  • pathief@lemmy.world
    link
    fedilink
    arrow-up
    9
    arrow-down
    2
    ·
    edit-2
    6 months ago

    Having free and open source software is not enough for some people. The dev needs to publish it in a Foss platform, use a Foss operative system, a Foss ide, mild political views. Free, quality and high maintained software is not good enough these days. /s

  • mormund@feddit.de
    link
    fedilink
    arrow-up
    9
    arrow-down
    3
    ·
    6 months ago

    Maybe an unpopular opinion but why would you care about how privacy invasive GitHub is? Your code is open-source anyways so MSFT can steal it wherever you host it. And if they haven’t changed it you’re able to sign up with just an email and a pseudonym. It’s not a social network where you have to post private information for it to be useful you can and most people do use it pretty anonymously.

    So I never understand the outrage about GitHub and MSFT. Git is distributed anyway, the only thing that can be lost are issues and pull request histories. If they fuck up, everyone can just move. Now GitHub Actions, that is a clever thing for binding users…

    • chebra@mstdn.io
      link
      fedilink
      arrow-up
      15
      arrow-down
      2
      ·
      6 months ago

      @mormund It’s not about the privacy of the code, but the privacy of the users clicking on github and then reading some news. They aggregate behavioral data about you.

      > the only thing that can be lost are issues and pull request histories

      “Only”?? That’s a HUGE problem. That’s exactly one of the walls keeping people inside github. Git protocol could distribute that, but it doesn’t suit the commercial platform’s interests -> go to open platforms instead.

      • taladar@sh.itjust.works
        link
        fedilink
        arrow-up
        5
        ·
        6 months ago

        Can you name an open platform that actually does distribute PRs and issues? I know there were a few that tried but I mean one that actually succeeded and is usable by people who just want to report a bug?

        Also, your issues and pull requests are much more likely to be lost in your self-hosted one project instance than on GitHub if anything happens to you.

          • taladar@sh.itjust.works
            link
            fedilink
            arrow-up
            3
            ·
            6 months ago

            Forgefed seems to be ActivityPub based which, judging by Lemmy, doesn’t solve the redundancy issue at all, it just allows you to interact with the content hosted in a single place from your own single place, giving you two single points of failure and two points where you can be tracked instead of one. This is not really the same kind of distributed as git repositories.

              • taladar@sh.itjust.works
                link
                fedilink
                arrow-up
                5
                arrow-down
                1
                ·
                6 months ago

                The term “single point of failure” means that only that point has to fail for the entire system to become unusable. You can easily have more than one of those in a system though.

        • toastal@lemmy.ml
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          6 months ago

          The pull request model is broken so why care about its replication? Send patches to a mailing list, ask for Gerrit, hopefully ForgeFed can be a thing sooner than later.

          • taladar@sh.itjust.works
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            6 months ago

            Talking about PRs being broken and then bringing up email, just about the most broken technology still in wide-spread use, is sort of ironic.

            • toastal@lemmy.ml
              link
              fedilink
              arrow-up
              1
              arrow-down
              1
              ·
              6 months ago

              It’s as broken as you make it—but if the Google started top posting for everyhing & everything is done thru the web, of course the UX is going to be even worse than it already. I have accepted patches by mail, & honestly it was easier (small changes, with no feedback required).

              But your comment ignored Gerrit, ForgeFed… you could use a decentralized sync system like Radicle.

    • taladar@sh.itjust.works
      link
      fedilink
      arrow-up
      4
      ·
      6 months ago

      I can understand the argument against GitHub in two contexts, one is when people build features into their software that assume GitHub, e.g. when a programming language assumes it can just prepend github.com/ to your repo to find it and the other is the argument that losing GitHub would be a huge blow because so many projects are there and only there so a lot of things would have to be done at once if that ever happened.

          • tyler@programming.dev
            link
            fedilink
            arrow-up
            3
            arrow-down
            1
            ·
            6 months ago

            Because the downsides completely outweigh the upsides by a massive amount. Risk of GitHub removing any of my projects is practically 0, while the upsides of hosting elsewhere is also almost 0.

            • PropaGandalf@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              6 months ago

              but does it really matter where your personal project with maybe 10 stars resides? if not why not choose something like codeberg?

              • tyler@programming.dev
                link
                fedilink
                arrow-up
                1
                ·
                6 months ago

                Yes because every company I work at uses GitHub, I use GitHub actions at work, and the majority of programmers on the planet use GitHub. So I’d not only need to maintain another account, use a different build system, and spread my project in some other manner, but I’d be losing the majority of my contributors (my most starred project has 100 stars, second most is 50). If that’s on a platform with the _most _ contributors then I literally wouldn’t have any on a different platform. I have 40+ FOSS projects (source, not forks) and I’m not going to maintain all of those somewhere where they won’t get viewers.

  • Veraxus@lemmy.world
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    6 months ago

    Gitlab just stomps Github into the dirt these days. For my own projects, I’m now Gitlab all the way.

    My one complaint, though, is that Gitlab’s Git LFS is way more pricey than Github, which sucks.

    • fruitycoder@sh.itjust.works
      link
      fedilink
      arrow-up
      2
      ·
      6 months ago

      Gitlab’s offerings are always better. There isn’t a single feature that I use between the two that I don’t prefer gitlab.

    • delirious_owl@discuss.online
      link
      fedilink
      arrow-up
      2
      arrow-down
      2
      ·
      6 months ago

      Guess you have a very insecure browser. Try hardening it and then logging into both. GitLab will throw you in an infinite loop at login. GitHub works fine.

      GitLab is terrible for privacy.

  • unknowing8343@discuss.tchncs.de
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    6 months ago

    I am also thinking of starting an open source project, and honestly, will do it on Github, because so far, GitHub does not require microphone or location access, yadayada… And the AI thing would happen anyway. Do you think Google has not used GitHub repos for training Gemini?

    I am very interested in syncing the repo with a federated git server, but from what I am reading Codeberg/Forgejo still don’t have federation working?