Post #2142217
2025-09-01 09:50 UTC
Replies (13)
-
@serapath@mastodon.gamedev.place 2025-09-01 10:49
@leaverou@front-end.social Feels a bit misleading. The headline suggests that the same single person makes most of open source.
-
@Kerplunk@mastodon.scot 2025-09-01 11:07
@leaverou@front-end.social I really love connections that are so fscking secure that they will not allow a browser that helps protect MY Privacy to connect. I get an endless loop of cloudflair crap. https://opensourcesecurity.io/2025/08-oss-one-person opensourcesecurity.io Verifying you are human. This may take a few seconds. opensourcesecurity.io needs to review the security of your connection before proceeding.
-
@systemflow@mastodon.social 2025-09-01 12:00
@leaverou@front-end.social Absolutely spot on. Open source keeps the entire digital world running, yet most maintainers are running on fumes. Companies profit from it daily time they start reinvesting in the people behind the code.
-
@letterror@typo.social 2025-09-01 12:55
@leaverou@front-end.social @ollicle@mastodon.social I have observed this. Very large companies even. Who, possibly, have learned they can put considerable pressure on these single person projects. “Would be a shame if we would be forced to fork your project… So why don’t you implement all the things we need?”. For free, obvs, because of course we all share equally in the great bountiful world of open source.
-
@jenzi@mastodon.social 2025-09-01 14:04
@leaverou@front-end.social I cannot get through the article with the writing style
-
@madbob@sociale.network 2025-09-01 14:15
@leaverou@front-end.social https://apt.gives/
-
@dmarti@federate.social 2025-09-01 14:21
@leaverou@front-end.social it's also baffling how many publicly traded companies are aware of maintenance risks affecting the software they depend on, and don't disclose those risks to investors and the SEC. Some kinds of issues in under-maintained dependencies can be "material" from a stockholder point of view
-
@Purple@woof.tech 2025-09-01 14:28
@leaverou@front-end.social I've worked for companies who happily pay hundreds of thousands in subscriptions for tools that are just basically open source software with a GUI on top, but refuse to donate a single cent to the open source tools that are the foundation of said company lol It's disheartening
-
@mpaluchowski@mastodon.online 2025-09-01 14:48
@leaverou@front-end.social it's not so baffling considering how component selection looks in companies, at least the ones I worked for. It's engineer-driven, so the programmers get to choose what they'll use. We look at popularity, dating of releases, we're also limited to certain licenses, cannot use libraries with known vulnerabilities. That's it. There's no formal process for supporting these libraries. There's one for purchasing, but it takes months to complete, so it's much faster to use free stuff.
-
@tknarr@mstdn.social 2025-09-01 16:03
@leaverou@front-end.social What would be the best way to get regulatory pressure applied for failure to disclose significant financial risk? Ideally pressure of a sort that can't be dismissed by just paying a fine.
-
@katanova@retro.social 2025-09-01 18:10
@leaverou@front-end.social "Most open source maintained by one person" actually just statistical error. overcommit georg, who lives in a cave & makes 100,000 git commits per day to abandoned forks, is an outlier adn should not have been counted.
-
@tuxicoman@social.jesuislibre.net 2025-09-02 11:14
@leaverou@front-end.social even in big companies , some parts of code have not many maintainers
-
@Photo55@mastodon.social 2025-09-07 09:59
@leaverou@front-end.social Prizes funded from taxes, awarded by several separate commissions of the great and good, universities, charities, etc??