Live data from Hacker News

A notable JavaScript developer shamelessly copied one of my most downloaded nod

twitter.com

251–260 of 309 posts

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#251
post #38

I'm losing my mind with people who keep replying with "That's open source baby! Don't make it open source if you don't like!" The problem with this behavior is as follows: - The MIT license requires attribution of the original work. The author contacted the person who forked this privately [1]. It wasn't done until the Twitter thread. - Questionably the fork was renamed and didn't include git history to make the firs…

I was on the forker’s side of things until those last two points: I don’t think anybody should have to justify creating a fork, but the (seemingly intentional) stripping of the revision history and absence of attribution indicates a bad actor to me.

Many legal things are immoral.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#252
post #232

Earlier quoted context omitted.

I added Colorette mention before the Twitter thread. Just after Colorette’s author asked me. We even agreed on text form of this mention. He started Twitter thread because of my PRs to Babel. After Twitter thread I just copied git commits (only because another person helped my with doing it right) and created COPYRIGHT file (but Colorette author was mentioned in LICENSE before the threat anyway).

Please tell me why didn’t you just click the fork button or mentioned Colorette from the very beginning but instead started out maliciously and tried to use your influence to your advantage? To me there’s no other explanation than you tried to sweep it under the rug but it didn’t work out so you’re playing the victim card.

As I mention here, because Nano Colors it's not just fork of Colorette. It was created as a mix of Colorette and kleur.

https://twitter.com/sitnikcode/status/1441827379454746637?s=...

Fork button will not work for this case.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#253
post #252

Earlier quoted context omitted.

Please tell me why didn’t you just click the fork button or mentioned Colorette from the very beginning but instead started out maliciously and tried to use your influence to your advantage? To me there’s no other explanation than you tried to sweep it under the rug but it didn’t work out so you’re playing the victim card.

As I mention here, because Nano Colors it's not just fork of Colorette. It was created as a mix of Colorette and kleur. https://twitter.com/sitnikcode/status/1441827379454746637?s=... Fork button will not work for this case.

You didn’t acknowledge the second part of my question

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#254
post #234

Earlier quoted context omitted.

> albeit after being called out Nano Colors mentioned Colorette in docs and Colorette author in LICENSE before Twitter thread. Colorette’s author asked m and I add the mention and agreed on the text.

Thank you for clarification. Would you mind providing proof of this? It seems many other comments claiming that attribution is only provided after being called out.

Sure. The first note was added 5 days ago https://www.npmjs.com/package/nanocolors/v/0.1.2

Seems like people are confused by git rebase which change commit time in GitHub.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#255
post #186
post #175

Earlier quoted context omitted.

His explanation on Reddit: "The way I learned how to program was by publishing one project a day that used a specific language feature I was trying to learn. No one even looked at my projects or used them until I had quite a few published. I didn't even want people to use them at that point, since I had no idea what I was doing. Then one day I realized that people were actually using some of the things I published as…

Maybe public common repository shouldn't be used as a dumping ground for every random guy learning how to make their first script. It's a bit like learning to drive by going to a public highway and just starting driving at random directions and then saying "why are you folks screaming? I'm just learning, it's depressing you always assume the worst!"

Unlike a public highway, you can't actually harm anyone by publishing to a public repository. The code is just there; you can ignore if you prefer (you can't ignore a swerving car in a highway).

What's actually harmful is the blind trust most developers have on adding dependencies without proper vetting. But if someone publishes a package they are not responsible for vetting it for inclusion in your project. So shifting blame to the library author gets responsibilities backwards.

Perhaps you would prefer a curated package registry, but in this case you would need actual curators. Something like Debian has maintainers, but doesn't have every library in existence (and what it has is often outdated anyway). Npm and other language registries aren't curated, by design. You could create a curated registry on top of npm but, again, you need curators.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#256

Earlier quoted context omitted.

Cascade of attention deficit[0]? JS is a vast ecosystem with little barriers to entry, and > Fixing bugs isn't fun; going through the bug list isn't fun; but rewriting everything from scratch is fun (because "this time it will be done right", ha ha) and so that's what happens, over and over again. I don't think there's anything malicious going on, except a lot of people doing JS. [0] https://www.jwz.org/doc/cadt.html

> I don't think there's anything malicious going on The dev who copied the code forked someone’s repo, went out of his way to remove attribution and git history, sent PRs to replace the original package in other libraries with his own version, and when called out on it got defensive instead of apologizing. I think malicious is a fair way to describe his behavior.

> sent PRs to replace the original package in other libraries

Would you mind sharing a link to such PR?

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#257

Earlier quoted context omitted.

Cascade of attention deficit[0]? JS is a vast ecosystem with little barriers to entry, and > Fixing bugs isn't fun; going through the bug list isn't fun; but rewriting everything from scratch is fun (because "this time it will be done right", ha ha) and so that's what happens, over and over again. I don't think there's anything malicious going on, except a lot of people doing JS. [0] https://www.jwz.org/doc/cadt.html

> I don't think there's anything malicious going on The dev who copied the code forked someone’s repo, went out of his way to remove attribution and git history, sent PRs to replace the original package in other libraries with his own version, and when called out on it got defensive instead of apologizing. I think malicious is a fair way to describe his behavior.

This is Nano Colors author.

Even before this Twitter thread we had talk with Colorette author and I added mention to the docs, his name to LICENSE and promised him to not replace Colorette by Nano Colors.

The Colorette mention was there 5 days ago.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#258
post #40

What is even going on here? https://github.com/jorgebucaran/colorette/issues/78 . They're arguing about who should have attribution for adding a single "!s &&" to improve performance? What happened with the world where open-source was about creating cool projects together , not about who has the most stars on GitHub? To be honest, this is the general feeling I get from the JavaScript community: Instead of working tog…

What's the term for when people with little to lose in low-stakes conflicts just have at it?

I first encountered this in the basement A/V department at my high school.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#259
post #175
post #149

Earlier quoted context omitted.

For what it's worth, this is also all the work of one person who spammed NPM with micropackages to boost his download counts. This meme attacking `npm` for nonsense like `is-odd` is quite literally the result of one person resume boosting. For every one thing, he broke it down into as many possible packages as possible, and all of his packages depend on 20 more of his packages. It's like a fractal of resume boosting.…

His explanation on Reddit: "The way I learned how to program was by publishing one project a day that used a specific language feature I was trying to learn. No one even looked at my projects or used them until I had quite a few published. I didn't even want people to use them at that point, since I had no idea what I was doing. Then one day I realized that people were actually using some of the things I published as…

It kind of stretches credulity for him to say these are just test projects that he doesn’t want people to use when his profile is bragging about having 1000 open source projects.

Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod

#260
post #233

Earlier quoted context omitted.

You should mention your conflict of interest as the nanocolors “developer”.

I am mentioning it in Babel PRs: > It will have a good support. My other projects from nano-series like very popular Nano ID shows a minimal number of bugs and excellent response time.

He meant you should mention your bias in the comments on HN, naturally you’re going to think you’re right (and they will think they’re right). It was my understanding that the commit history wasn’t originally saved - maybe this was wrong, did you have the commit history immediately after copying the code base? The main issue is then replacing it in open source software where the other version exists without due cause.

Should we copy your code, attribute it to you in a readme, and slightly optimize some of your code to replace your efforts everywhere?

Post reply on HN