Reference :
https://www.theregister.com/2022/01/10/npm_fakerjs_colorsjs/



Do you agree developer corrupts their open source project ?
Or, if you have some open source project, will you delete it and switch to commercial product ?

Sometime we might feel "unfair" as people using our hard work to earn money without any compensate or encouragement with a single cents.

Then he doesn't understand the ethos of open source.

He could have created a license that restricted commercial use, some companies will abuse it for sure.. but larger ones won't take the risk.

We should doubt how many people really read all the T&C (for any software and hardware)
as they wants to use it immediately.

Do people know that some products (including hardware and software)
are prohibited deliver to certain location or re-sale them ?

How many products we bought only "the rights to use it"
but not own the product so that you can break it, modify it, re-sale it, or give as a gift ?

There are many organization hold copyrights do not do production,
But people (factory) who want to use their copyrights to make products have to pay loyalty fee yearly.

---------- ---------- ---------- ----------
Thank you to open source software and hardware.
So we could have more affortable devices and software.

For some people who want to switch their projects from open source to commercial,
This give us a signal that, hard to request hungry stomach people to sharing food.

The author might not "foresee" his project become so popular,
but it might not so popular if it is under commercial license.

instead of currupt the project,
he could ask for "commercial support" fee for bugs fix, features request and upgrade.

How to differentiate "commercial support"? If people can get for free, they will. Human nature.

Which is why the license is important, can make it free for personal/small teams. Like what docker is doing. For larger organizations, they will have to pay if they want to use it, this is a happy middle-ground that most people are ok with. This is normally also done on an "honor" basis, you can't really tell if someone is using it commercially or personal, but large organizations are risk averse, cheaper to pay license fee than lawyer fees if kena sue.

After read these news
(and some other services been ban,
some other products such as crude oil, latex gloves, palm oil, been seize or ban, ... )

Russian smartphone manufacturers banned from installing Android
March 24, 2022
Scott
URL : Russian smartphone manufacturers banned from installing Android

US design company Figma bans DJI after US sanctions
by TechNode Feed Mar 14, 2022
URL : US design company Figma bans DJI after US sanctions

---------- ---------- ---------- ----------
We should acknowledge that either technology or globalization, it only happen between "friends".

If some leader bad mouth other country's leader, or policy conflict with others,
We could facing services ban including instant messaging, social media, **cloud, ...
And these ban may be lifted by only few games of golf ?

The author of open source project may say,
'Hey, we don't like you, so we poison the project and destroy your system, and ban your access."

Nobody like this, but no body is a saint.

We actually had an issue where some of our builds were failing because some assets we were referencing on a CDN was being null routed due to the conflict. Was a quick fix, but does highlight how these things can be problematic when we rely so much on external services/dependencies.

may be make a copy of "stable release" on own control server is still the most reliable practice.

Yeap, but where do you draw the line. Its easy for CDN cause you can just create an "internal cache server" that does something like https://cdn.private.example.com/cdn.example.com/path/to/file.js then the server fetches based on the cdn.example.com/path/to/file,js and stores a copy for future requests.

However keeping a copy of npm/composer would be ridiculous. Best you can do is keep a copy of the installed packages to revert to or re-package into a private repo and overriden. Which are still steps that need to be manually taken.

Any comments?

This post has been edited by MatQuasar: Oct 16 2023, 08:59 PM

*shrug* He's right?

I also want to know.....

after knowing open source projects used as ai training data,
and big corporate didn't pay to open source projects,

i believe he is right.

we might need to reconsider what if your open source projects may be one day took away your job ...

Lol, it goes waaaay beyond before that.

https://hn.algolia.com/?dateRange=all&page=...rity&type=story

https://daniel.haxx.se/blog/2021/02/19/i-will-slaughter-you/Z

More like people picking fights with the dev as well.

https://news.ycombinator.com/item?id=38064273

This post has been edited by angch: Oct 30 2023, 10:58 AM

I believe the initial concept for open source is good.

But after people take it for granted,
some people make money from it without contribute back,
further more start bite the hand that feeds,
it makes developers disappointed, even refuse to do it.




We won't stop people to sacrifice themselves to light up others,
but no more reason to encourage people to do it,
or accuse people for not doing it.

P/S : we may have to warn any people who want to do open source.





This post has been edited by flashang: Oct 30 2023, 12:29 PM

Nah, you should release your stuff, and encourage everyone to release, as Open Source license when and where as possible. Especially the toy stuff.

Just don't have any delusions of what that means.

It amazed me at one time, where a debugger/disassembler/emulator author hosted their software and source code on a website, ignoring big platform like GitHub (I actually asked them through forum post).



It is like GitHub is not necessarily of great value, and with GitHub it doesn't mean we can find every open-source software on the planet.

This post has been edited by MatQuasar: Oct 30 2023, 09:33 PM

all the fliermate 1 , 2, 3 is you?

Sorry for the confusion.... but yes, I used many user names and fliermate* were me. I hope the compulsive thought to change user name will get better this time.

The reason to post online could be :
1. try to get more people to recognise your work.
2. hope some people would use it and benefit from it.
3. other (e.g. get fame in either good or bad reason)

Post something online but don't expected any response ?
This will create contradiction to yourself.

If you don't care who will like or use it,
what is the reason to publish online ?

Backup ? just do it in your thumbdrive / external hdd.

Because I/we can.