Is this political or does it have actual technical merit?
Gem.coop
131–140 of 331 posts
Re: Gem.coop
#132Is this political or does it have actual technical merit?
The best "technical" benefit from this is that if one goes down, you could switch to the other in a pinch, so arguably better than the status quo even if you disagree with the organizational/"political" motives.
Re: Gem.coop
#133Earlier quoted context omitted.
What does “fash problem” mean?
There's some weird opinions coming from mostly DHH. My personal take is that they're blatantly racist, but everyone can have their own Here's some fun facts: - DHH enforced a "No Politics at Work" policy. - DHH wrote a post expressing that he wouldn't want to live in London anymore because it's "no longer full of native Brits", and expressed support for a Tommy Robinson march he called "heartwarming". Tommy Robinson…
Ironic that DHH is politically active enough that it affects his day to day activities and public perception of his company - kind of the exact opposite of his own policy he expects his employees to abide by.
Re: Gem.coop
#134Just a thought of mine: why don’t we switch fully to git? Commit signing, tag signing, Decentralize. Doesn’t that sound like a good alternativ?
The git protocol is more complex and harder to scale. It's especially wasteful if people are going to redownload all packages every time their amnesiac CI runs.
Single-file archives are much easier to distribute.
Digests and signatures have standard algorithms, not unique to git. Key/identity management is the hard part, but git doesn't solve it for you (if you don't confuse git with GitHub).
Re: Gem.coop
#135I'm really pleased to see this happening, but sad that it has come to this. What I'd really like to see is a whole bunch of people acting more professionally. Who you pray to, who you vote for, and who you sleep with are irrelevant to a professional context - and open source development is a professional context. So everyone needs to keep their professional and personal lives separate. I know that at best I would be…
I've been in the "keep work and politics" separate camp most of my life. However, with the lines that have been crossed recently, where literal democracy and freedom are at stake, I don't think people have the luxury of keeping work and politics separate any longer. Fascism is bad and people cannot be silent.
Re: Gem.coop
#136Earlier quoted context omitted.
To take the maximally negative view of things: - uv is a cool tool, but Astral has signaled their intention to have it tie in nicely to paid services. - that's a nice moat! - Andre & friends saw that in the Python community (and uv's success) and decided they could do the same for Ruby - Their collective announces rv and now wants to make us dependent on them & friends for Ruby Gems. - After Hashicorp and others, I'm…
By "Astral" do you mean "Spinel"? Also, what paid services? So far the only paid services they've mentioned is retainer services that essentially amount to priority customer support. The tools themselves are only ever described as free EDIT: Misread the comment and thought it was only about `rv`, not both `uv` and `rv`
"If it's free, you're the product"
Re: Gem.coop
#137Earlier quoted context omitted.
For me, having the software be maintained (and have a security engineer working on it) feels like a security benefit. Does the original have many maintainers left?
It has allegedly been taken over by Shopify. I expect it to be very well maintained. The issues are of ethical character.
Well maintained? Rubygems has had no commits in the last 10 days and that's not a good sign. I don't think you can find a window with no commits for 10 days in its 15+ year history.
History has shown over and over that when a for-profit org takes over public infrastructure, maintenance is cut to the bone.
Re: Gem.coop
#138Given some of the ways Andre Arko gets described (See https://justin.searls.co/posts/why-im-not-rushing-to-take-si... for a recent overview) I'm a little wary of what the motivation behind this is.
To take the maximally negative view of things: - uv is a cool tool, but Astral has signaled their intention to have it tie in nicely to paid services. - that's a nice moat! - Andre & friends saw that in the Python community (and uv's success) and decided they could do the same for Ruby - Their collective announces rv and now wants to make us dependent on them & friends for Ruby Gems. - After Hashicorp and others, I'm…
The Ruby ecosystem is already decentralised in that there is no single source of truth for published gems. You can pull the source from any software forge that uses git, you can point to any self hosted gem server or use something like Artifactory or GitHub package registry. You can vendor the code if you want.
This entire post is practically the case in point, except I’m not clear on how they got real time sync with RubyGems and if any other competitor would have the same capability.
To use Astral and uv as an example, they would have to fork PyPI and maintain all the infra for that and not just the tool that manages the dependencies.
Re: Gem.coop
#139Earlier quoted context omitted.
To take the maximally negative view of things: - uv is a cool tool, but Astral has signaled their intention to have it tie in nicely to paid services. - that's a nice moat! - Andre & friends saw that in the Python community (and uv's success) and decided they could do the same for Ruby - Their collective announces rv and now wants to make us dependent on them & friends for Ruby Gems. - After Hashicorp and others, I'm…
By "Astral" do you mean "Spinel"? Also, what paid services? So far the only paid services they've mentioned is retainer services that essentially amount to priority customer support. The tools themselves are only ever described as free EDIT: Misread the comment and thought it was only about `rv`, not both `uv` and `rv`
[deleted]
Re: Gem.coop
#140Earlier quoted context omitted.
To take the maximally negative view of things: - uv is a cool tool, but Astral has signaled their intention to have it tie in nicely to paid services. - that's a nice moat! - Andre & friends saw that in the Python community (and uv's success) and decided they could do the same for Ruby - Their collective announces rv and now wants to make us dependent on them & friends for Ruby Gems. - After Hashicorp and others, I'm…
By "Astral" do you mean "Spinel"? Also, what paid services? So far the only paid services they've mentioned is retainer services that essentially amount to priority customer support. The tools themselves are only ever described as free EDIT: Misread the comment and thought it was only about `rv`, not both `uv` and `rv`
What is Spinel? Astral is the developer of uv, and they have announced their hosted platform service, pyx [0]. It appears it will be FOSS as well, but they'll have a hosted version of it.