Give Up GitHub - Software Freedom Conservancy

[ph00lt0 (Mare Polaris)]

That seems like an advantage to me. I defintely also drop all messages coming from such mail providers.

[gregandcin]

I use Codeberg for some projects. The community around Forjeo is doing really good on both improving the platform’s current features and adding new ones, though I think GitHub’s PR system is still better when it comes to reviews.

I will say, I find tools like GH Codepilot, Codeium, etc. to be very limited in functionality. I find myself either writing code faster before the autocompletes pop up or I just want it to generate boilerplate that I end up rewriting half the time anyways because I know parts of it are wrong.

I don’t want to use GitHub, but everyone and their metaphorical mother uses it, so if I want to contribute to a project or download user facing binaries (Please make a website with a direct download link for non-Linux users I pray to the FOSS devs) I am stuck using it.

[Lukas (Lukas Dutovas)]

@gregandcin

I don’t want to use GitHub, but everyone and their metaphorical mother uses it, so if I want to contribute to a project or download user facing binaries (Please make a website with a direct download link for non-Linux users I pray to the FOSS devs) I am stuck using it.

And this is a massive issue, if you’re someone new and want to contribute, then you’re forced to use GitHub no matter if you want it or not.

[overdrawn98901]

@Anon47486929

GitHub could replace app binaries, could change app signatures presented in Readme used for verification, could compromise the code used, could deliver malicious payloads, could change GitHub actions maliciously, etc.

Do you really think GitHub would replace binaries in releases? Like if they deliver such an attack, it would case a mass exodus from their platform, why would they do that? This just seems far fetched.

A meteor can fall from the sky and kill me when I walk out my door, but I don’t really plan my days around that.

[overdrawn98901]

I’m sorry, I didn’t mean to offended you. It just seems that if these are the things of concern, then I’d suspect moving hosting providers just shift liability from GitHub to some other party. Maybe some general gains for specific jurisdictions, and maybe less telemetry from others.

[hakavlad]

@Anon47486929

could replace app binaries, could change app signatures presented in Readme used for verification, could compromise the code used, could deliver malicious payloads

Codeberg cannot do this?

[hakavlad]

@Anon47486929

could deliver malicious payloads

If you are a target of the state, they can do it through any other site. Refusing GitHub will not help here.

[hakavlad]

@Anon47486929

Can you point where I implied that?

This implied by the OP: If you criticize GitHub, you should expect that its alternatives do not have the undesirable properties.

[anon41112412]

Well, this discussion is seriously going in a weird place. I think one should use the software that fits best for their needs be it github or codeberg. That’s all I wanna say and I’m out.