• Gork@lemm.ee
    link
    fedilink
    arrow-up
    28
    ·
    16 days ago

    Also cybersecurity implications here. Nefarious actors can prop up their evildoings with fake stars and pose as legitimate projects.

    • aliser@lemmy.world
      link
      fedilink
      arrow-up
      14
      ·
      16 days ago

      my first thought. I usually rely on stars for “trustworthiness” of random projects before running their code.

  • AItoothbrush@lemmy.zip
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    2
    ·
    16 days ago

    I almost commented something like “thats extremely overpriced, why dont you set up a raspberry pi to do it for you for free” and then i realized the people who could do that dont need fake stars.

      • AItoothbrush@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        15 days ago

        Automation. You replace the user with a script that does everything. Not that hard. Captchas dont really work anymore with ai, and you can pay people to do it for you for a fraction of a cent instead of the absurd prices listed.

        • theherk@lemmy.world
          link
          fedilink
          arrow-up
          10
          ·
          15 days ago

          But you still need the user accounts. Which must be created and are verified by email. Then you have to generate tokens for them to call the api endpoint to add the star. I’m not saying it isn’t doable, but it would be non-negligible and GitHub is going to squash you back at some point creating all those accounts from one source.

          • gravitas_deficiency@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            15 days ago

            But the main point is that good and well-written code doesn’t need this sort of misdirection, nor would the authors generally engage in this sort of thing

          • dil@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            15 days ago

            Right - the cost is your time instead of dollars.

            I don’t like doing stuff, so I give my time an hourly rate of $100. Absolute BEST case scenario (for me) would be that this is a weekend project, so call it 10 hours.

            So my best case break-even point would be 10K stars. Which seems like it’d be more than I’d need?

  • phar@lemmy.ml
    link
    fedilink
    arrow-up
    17
    ·
    15 days ago

    I am not a programmer. But I have been using github as an end user for years, downloading programs I like and whatnot. Today I realized there are stars on github. Literally never even noticed.

    • NotMyOldRedditName@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      15 days ago

      The stars are more important when you’re a developer. It indicates interest in the project, and when it’s a library you might want to use that translates into how well maintained it might be and what level of official and unofficial support you might get from it.

      Other key things to look at are how often are they doing releases and committing changes, how long bugs are left open, if pull requests sit there forever without being merged in etc.

  • geography082@lemm.ee
    link
    fedilink
    arrow-up
    13
    ·
    16 days ago

    There is a clear situation in Foss( even more in self hosting) where projects are presented as free open source but they are intended to monetize at the end and use the community help for development.

    • FlappyBubble@lemmy.ml
      link
      fedilink
      arrow-up
      2
      ·
      16 days ago

      Can you give examples of this? What is the coat to the end user? Hardware, IT-services (VPS, and alike?) or like map providers using OSM data?

        • blackfire@lemmy.world
          link
          fedilink
          arrow-up
          3
          ·
          15 days ago

          In my opinion that was a little different. The enterprise was using the software basically, contributing nothing but selling services around it. The licence was meant to force them to help out monetarily from what they were making off it. But rather than do that Mason forked it and now have to support their own imp with their own devs.

    • conicalscientist@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      15 days ago

      This happened in the earlier years of Android. Developers were FOSS until people helped them get the app to a polished state. Then close it and charge money. Make a big push to promote the paid app.

  • EmilieEvans@lemmy.ml
    link
    fedilink
    arrow-up
    5
    ·
    15 days ago

    Also, what if this is an actual viable way to “market” for an open-source project?

    I am fortunate enough to not market my stuff:

    If somebody finds and can make use of it. Great.

    In the other case who cares? Didn’t hurt or cost me anything to publish it.

    Fake GitHub stares have other implications: Typosquatting is a real issue and fake stars make it more convincing that it is the genuine project.

  • Donkter@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    16 days ago

    Shocking, a site full of diy programmers and hackers are trying to hack the system. Maybe even just for fun.

  • CrypticCoffee@lemmy.mlM
    link
    fedilink
    arrow-up
    0
    ·
    16 days ago

    Why would it be? Software is good based on it’s use and recommendations from real folk, not *s. Many project not on github

      • CrypticCoffee@lemmy.mlM
        link
        fedilink
        arrow-up
        1
        ·
        16 days ago

        I never went with a software project from random scrolling. It has no value to me if it doesn’t meet a need I have right now.

        No contributor is going to be good that doesn’t use it.

    • glans [it/its]@hexbear.net
      link
      fedilink
      English
      arrow-up
      2
      ·
      16 days ago

      Well for me personally if I am seeking an application to solve a problem and there are 2 comparable options which are on github, I will first try the one with more stars. Especially if there is a large discrepancy.

      When I compare a github vs a non-github project I take into consideration that the other code forge has fewer users, and also I generally prefer devs who take the initiative to get off github. So I will usually give them a go unless the project is too incomplete/stale/inactive.