Viewing profile — rndhouse

I'm working on a tool for collaboratively reviewing Rust crate dependencies: https://github.com/thirdpass-org/thirdpass Also supports npm, PyPI, and Ansible Galaxy.

Hello, The goal of Thirdpass as a service is to coordinate the collaborative review effort necessary to lower software supply-chain risks. Multi-ecosystem support: crates.io, pypi.…

I've been playing around with agent-native source annotation to specifically address the massively parallel work problem. Check it out here: https://github.com/draxl-org/draxl

VCamper: use LLMs to spot security fixes before CVE publication Once a patch for a security vulnerability is public, the patch itself can reveal the vulnerability before the CVE is…

Hello, I’m building Draxl, a source format for a world where code is edited by millions of agents. AI agents will produce far more code than humans do today. Rebased branches, conc…

OpenFare is attempting to solve this problem. It allows developers to effectively invoice by adding a file to their software package. No need to modify package managers. https://gi…

Two more alternatives to crev: https://github.com/vouch-dev/vouch https://github.com/mozilla/cargo-vet

I haven't heard about librepay before, thanks for letting me know. I'll take a look!

> the cost of adding them (INCLUDING the transaction costs, the cost of dev hours spend on convincing the procurement dept, etc etc etc) is cheaper than the cost in dev hours I thi…

I really like that idea. I think it's really compelling. The latest features/bug fix can be made available at a price before a certain time limit. And then of course you eventually…

Changes to the lock file (`OPENFARE.lock`) need to be reviewed. The lock file needs to survive a project fork. Changes to the lock file need to be tracked on a contributor level. T…

Umm, I could be wrong, and you might be referring to what I have in mind. But your dream sounds an awful lot like the OpenFare Commercial License (non-FOSS) idea: https://github.co…

For a user of the software, free might have downsides that micropayment-funded-at-scale might not have. If all users chip in $1/month, perhaps it adds up to something significant. …

I agree with your view. I imagine the distribution curve of funding. If it shifts one way, more developers become full time open source maintainers. Those who previously received n…

Will update, thanks.

It's a tough problem. But I think mechanisms for rating software packages already exist (GitHub stars for instance). And we have reasonable metrics for whether a software package i…

I don't believe enough public software developers ask for or expect to receive donations. The macro goal of OpenFare is to put in place a mechanism that developers can use to recei…

There is so much variety in how people contribute and what they hope to get out of it in a perfect world! My goal is to put the mechanisms in place. And give people another means o…

Yes, I agree. There are two different audiences: public software developers and public companies. And they both need different interfaces. I love it.

> 2. the maintainers are surely not the only ones contributing; how to pay all the rest? This is certainly a problem that I would like to address. It's important to reward/fund con…

OpenFare does open the door to an alternative non-FOSS strategy for funding for small software libraries. Commercial payment plans defined in code can be managed programmatically. …

Thank you for taking a look at what I've shared so far. My intent is to create a community around the idea and to get early feedback. It's true that there are many problems outstan…