| ▲ | Foxboron 3 hours ago | |||||||||||||||||||||||||||||||
> but for almost any economically important project all the major contributors and maintainers are on the payroll of one of the big tech interests or a foundation funded by them. "almost" is the load bearing word here, and/or a weasel word. Define what an "economically important project" is. > Also just to be clear: node is filled with povertyware and you should be extremely careful what you grab from npm. Is "povertyware" what we call software written by people and released for free now? | ||||||||||||||||||||||||||||||||
| ▲ | ajross 2 hours ago | parent [-] | |||||||||||||||||||||||||||||||
> "almost" is the load bearing word here, and/or a weasel word. Define what an "economically important project" is. Linux, clang, python, react, blink, v8, openssl... You know what I mean. I stand by what I said. Do you have a counterexample you think is clearly unfunded? They exist[1], but they're rare. > Is "povertyware" what we call software written by people and released for free now? It's software subject to economic coercion owing to the lack of means of its maintainership. It's 100% fine for you to write and release software for free, but if a third party bets their own product on it they're subject to an attack where I hand you $7M to look the other way while I borrow your shell. [1] The xz-utils attack is the flag bearer for this kind of messup, obviously. | ||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||