Post #898846
2025-11-11 06:23 UTC
Replies (7)
-
@rother_stuebs@mastodon.online 2025-11-11 07:24
@sebastian@phpc.social I think you forgot Linux, BSD, and GNU Tools. And Apache Webserver. And MariaDB. #OpenSource
-
@kravietz@agora.echelon.pl 2025-11-11 08:00
@sebastian@phpc.social Very good article! The problem is that very few for-profit companies will voluntarily donate to such projects simply because their shareholders will never vote to pay for something they can get for free. The larger the company, the less it’s ready to pay. The actual devs and architects may fully understand how serious the situation is, the problem is at the CFO level. The devs simply won’t get budget approved for such things - been there, done that. The CFO might even understand it too, the problem is in the freeriding and cost cutting culture of the shareholders. It’s the same thing about caching - not caching costs them nothing, introducing caching costs their devs time. Freeriding logic at its best… The solution is very simple - licensing. Large companies do care about legal aspect and if the repositories will introduce mandatory fee depending on number of package downloads or even a small flat fee for everyone, and legal will promptly deliver a reason to pay to CFOs.
-
@dalke@toots.nu 2025-11-11 09:24
@sebastian@phpc.social I tested that contingency for my small (~150KLOC) project. I already distribute from my own site, not PyPI. I can vendor my core dependencies. I even figured out how to pip install my package without using PyPI for setuptools. The latter wasn't easy. It feels like Python's deployment tooling encourages people to depend on centralization around PyPI, so it's not surprising we've ended up where we are. I have no ideas for how to make a better or more decentralized alternative.
-
@phl@mastodon.social 2025-11-11 09:51
@sebastian@phpc.social > Developers: Implement proper caching in CI/CD. Stop wasteful usage patterns. I'm happy to see this as the first point. There's so much in modern tech that treats things such as a functional internet connection or files present somewhere in the internet as an axiom with zero efforts to make it more resilient or less wasteful. Unrelatedly (or is it really?), also caching in things as simple as a GIF/sticker box in a chat app. How much traffic do we waste because we don't cache?
-
@pewnack@aus.social 2025-11-11 23:29
@sebastian@phpc.social Certainly not the last project I worked on. We cached most everything.
-
@mattbrowndev@mastodon.social 2025-11-12 03:01
@sebastian@phpc.social small nit: the NPM registry is owned and operated by Microsoft. NPM is not party to the statement because NPM does not have the same resource issues as independent registries like PyPi or Packagist.
-
@whynothugo@fosstodon.org 2025-11-12 21:11
@sebastian@phpc.social Don’t threaten me with a good time. I *wish* package registries didn’t exist. Centralised package registries of this kind are an absolute terrible idea.