Live data from Hacker News

GitHub's fake star economy

awesomeagents.ai

131–140 of 403 posts

Re: GitHub's fake star economy

#132
post #35

> VCs explicitly use stars as sourcing signals In my opinion, nothing could be more wrong. GitHub's own ratings are easily manipulated and measure not necessarily the quality of the project itself, but rather its Popularity. The problem is that popularity is rarely directly proportional to the quality of the project itself. I'm building a product and I'm seeing what important is the distribution and comunication inst…

> measure not necessarily the quality of the project itself, but rather its Popularity

Surely a project's popularity is often related to its utility. A useful and popular project seems like exactly the kind of thing a VC might be interested in.

Re: GitHub's fake star economy

#133

Can anyone explain why on earth VC's are making actual investment decisions based on imaginary internet points ? This would be like an NFL team drafting a quarterback based on how many instagram followers they have rather than a relevant metric like pass completion, or god forbid, doing some work and actually scouting candidates. Maybe the Cleveland Browns would do that[0], but it's not a way to mount a serious Super…

I don't follow American Football so I don't know how coaching contracts work for you guys, but how does someone go 1W 15L one season, survive as head coach to go 0W 16L the next season, and still start the next season after that as head coach?

Over here the fans would be singing "You're getting sacked in the morning" halfway through that first season.

I guess not having relegation makes things slightly less ruthless for you.

Re: GitHub's fake star economy

#134

These kinds of articles make you feel like there are specific, actionable problems that just need an adjustment and then they disappear. However, the system is much worse than you'd expect. Studies like this are extremely valuable, but they don't address the systematic problems affecting all signaling channels: most signals themselves have been manufactured into a product. Build a SaaS and you'll have "journalists" a…

Yeah imagine how nature feels with all of the fake eyes and other fake predator signals like bright colors. Evolution finds a way

Re: GitHub's fake star economy

#135

Can anyone explain why on earth VC's are making actual investment decisions based on imaginary internet points ? This would be like an NFL team drafting a quarterback based on how many instagram followers they have rather than a relevant metric like pass completion, or god forbid, doing some work and actually scouting candidates. Maybe the Cleveland Browns would do that[0], but it's not a way to mount a serious Super…

This has happened in multiple industries a number of times - publishers discover that people with large twitter followings sell a decent number of books, so they start selecting new authors who only have large twitter followings, and discover is was correlation and not causation.

And once it gets out that it’s a selection criteria it gets gamed to hell and back.

Re: GitHub's fake star economy

#136
post #55
post #3

Honest question: how can VCs consider the 'star' system reliable? Users who add stars often stop following the project, so poorly maintained projects can have many stars but are effectively outdated. A better system, but certainly not the best, would be to look at how much "life" issues have, opening, closing (not automatic), and response times. My project has 200 stars, and I struggle like crazy to update regularly…

Much more important is who starred it. And are they selective about giving out stars or bookmarking everything. Forks is a closer signal to usage than stargazing.

Indeed, GitHub should set up a monthly quota for available stars to give and correlate the account age with it: either make something up like a "trusted-age-factor" that multiplies any given star by that factor, or scale the available quota accordingly by that factor (and let users star repos repeatedly).

GitHub should also introduce a way to bookmark a repo, additional to the existing options of sponsor/watch/fork/star-ing it.

Re: GitHub's fake star economy

#137

Can anyone explain why on earth VC's are making actual investment decisions based on imaginary internet points ? This would be like an NFL team drafting a quarterback based on how many instagram followers they have rather than a relevant metric like pass completion, or god forbid, doing some work and actually scouting candidates. Maybe the Cleveland Browns would do that[0], but it's not a way to mount a serious Super…

I don't follow American Football so I don't know how coaching contracts work for you guys, but how does someone go 1W 15L one season, survive as head coach to go 0W 16L the next season, and still start the next season after that as head coach? Over here the fans would be singing "You're getting sacked in the morning" halfway through that first season. I guess not having relegation makes things slightly less ruthless…

Owners don’t care about winning, but about profitability. And you can make a lot of money with a failing football team (selling/trading draft picks, etc) and your fans get used to losing …

Re: GitHub's fake star economy

#138

I don't think I have ever used stars in making a decision to use a library and I don't understand why anyone would. Here are the things I look at in order: * last commit date. Newer is better * age. old is best if still updating. New is not great but tolerable if commits aren't rapid * issues. Not the count, mind you, just looking at them. How are they handled, what kind of issues are lingering open. * some of the co…

But to someone else, it is a meaningful metric that you bookmarked something. It doesn't matter that the star isn't you saying you liked something. It's already telling enough merely that you wanted to bookmark it.

It's only not meaningful because of how other people can game it and fabricate it, but everything you just said, if it was only people like you, that would be a very meaningful number.

It doesn't even matter why you bookmarked it, and it doesn't matter that whatever the reason was, it doesn't prove the project as a whole is overall good or useful. Maybe you bookmarked it because you hate it and you want to keep track of it for reference in your ted talk about examples of all the worst stuff you hate, but really by the numbers adding up everyone's bookmarks, the more likely is that you found something interesting. It doesn't even matter what was interesting or why. The entire project could be worthless and the thing you're bookmarking was nothing more than some markdown trick in the readme. That's fine. That counts. Or it's all terrible, not a single thing of value, and the only reason to bookmark it is because it's the only thing that turned up in a search. Even that counts, because that still shows they tried to work on something no one else even tried to work on.

It's like, it doesn't matter how little a given star means, it still does mean something, and the aggregation does actually mean something, except for the fact of fakes.

Re: GitHub's fake star economy

#139

I don't think I have ever used stars in making a decision to use a library and I don't understand why anyone would. Here are the things I look at in order: * last commit date. Newer is better * age. old is best if still updating. New is not great but tolerable if commits aren't rapid * issues. Not the count, mind you, just looking at them. How are they handled, what kind of issues are lingering open. * some of the co…

I use stars to try and protect myself from dependency confusion attacks.

For example, let’s say I want to run some piece of software that I’ve heard about, and let’s say I trust that the software isn’t malware because of its reputation.

Most of the time, I’d be installing the software from somewhere that’s not GitHub. A lot of package managers will let anyone upload malware with a name that’s very similar to the software I’m looking for, designed to fool people like me. I need to defend against that. If I can find a GitHub repo that has a ton of stars, I can generally assume that it’s the software I’m looking for, and not a fake imitator, and I can therefore trust the installation instructions in its readme.

Except this is also not 100% safe, because as mentioned in TFA, stars can be bought.

Re: GitHub's fake star economy

#140

I don't think I have ever used stars in making a decision to use a library and I don't understand why anyone would. Here are the things I look at in order: * last commit date. Newer is better * age. old is best if still updating. New is not great but tolerable if commits aren't rapid * issues. Not the count, mind you, just looking at them. How are they handled, what kind of issues are lingering open. * some of the co…

I use stars to try and protect myself from dependency confusion attacks. For example, let’s say I want to run some piece of software that I’ve heard about, and let’s say I trust that the software isn’t malware because of its reputation. Most of the time, I’d be installing the software from somewhere that’s not GitHub. A lot of package managers will let anyone upload malware with a name that’s very similar to the soft…

What does "TFA" mean here please?
Post reply on HN