Live data from Hacker News

Introducing unlimited private repositories

github.com

611–620 of 662 posts

Re: Introducing unlimited private repositories

#611
post #480
post #467

Earlier quoted context omitted.

For a 50 person group, $430 is peanuts, it's just peanuts. I'm sorry, I just don't feel for these people, this is getting upset about the $0.10 charge for butter when you paid $10.00 for the popcorn.

Yeah, who cares if they hiked the prices up by an insane amount, right? /s

You're begging the question, I'm saying their price hike is not an "insane" amount.

Re: Introducing unlimited private repositories

#612

The incentive changes for this are so massive, nice "experiment" from an economics perspective. 1. penalizes OpenSource organizations that need a few private repos for password, server configuration or other things. Was 25$ before, now for example Doctrine with 48 collaborators it would be 394$. Even if just the admins have access to that repository. 2. penalizes collaboration, inviting every non-technical person in…

Your #1 isn't correct. Collaborators don't count as a seat if they don't have access to a private repo.

> These users do not fill a seat: Outside collaborators with access to only public repositories

https://github.com/blog/2164-introducing-unlimited-private-r...

Re: Introducing unlimited private repositories

#613

Earlier quoted context omitted.

I've never understood why all the fork/change/commit/push/pull-request fol-de-rol is necessary. Why can't we just pull, hack, and submit a "push request"? But I guess I've never understood why everyone else seems to be OK with a build/repo system where it is even possible to break the build at all; it's always seemed to me like it should be set up so you push to a testing stage, which merges to master if the build su…

Gitlab has the ability to do that. http://doc.gitlab.com/ce/workflow/merge_when_build_succeeds....

Thanks - I am unfamiliar with gitlab but will have to check it out.

Re: Introducing unlimited private repositories

#614
post #70

This is way too expensive! Self-hosted GitLab is cheaper and has better uptime! Not to mention, they should have made you pay only for users with commit rights!

Only if you assign no value to your own time, and assume you can do a better job with availability and durability than a dedicated Operations team and a multi-million dollar budget.

Like Salesforce has? http://www.theregister.co.uk/2016/05/11/marc_benioff_publica...

Re: Introducing unlimited private repositories

#615
post #584

Earlier quoted context omitted.

I've never understood why all the fork/change/commit/push/pull-request fol-de-rol is necessary. Why can't we just pull, hack, and submit a "push request"? But I guess I've never understood why everyone else seems to be OK with a build/repo system where it is even possible to break the build at all; it's always seemed to me like it should be set up so you push to a testing stage, which merges to master if the build su…

I agree, especially when all you really want to do is make a small change. (I'm less likely to contribute then - preferring to open an issue and nag someone on the team/who already has a fork to implement my one-liner!) But I think it would be look pretty radically different architecturally - where would such a 'push request' live? You don't have push rights on the repo; nor do you have your own fork. It needs to wor…

A "push request" would just be a git-format-patch on the contributor's side and a git-am on the project maintainer's side. Github wouldn't have to create a separate repository - they'd just have to keep an incoming "mail" spool for each repo and show some UI letting the project maintainer review these patches and approve them or deny them. Maybe there actually would be an email address representing "push requests" to the repo, but more likely I'd imagine github would just offer an upload box on the project page where you could post a patch file.

This would be so much easier than the pull-request dance that I bet it would lead to a lot of simple fixes or improvements being contributed by people who otherwise wouldn't get involved at all. Those have value in themselves - but it would also go a long way toward helping recruit new project members, if people could dip their toes in easily before having to go through all the mumbo-jumbo of a private fork and configuring the upstream and all that.

Re: Introducing unlimited private repositories

#616
post #492
post #439

Earlier quoted context omitted.

I've used Bitbucket in the past. They charge per-user[1], and their pricing is significantly better free for 5 users and then once you eclipse 5 users it's $1/user up to 100 users and then $200 for unlimited users. [1] - https://bitbucket.org/product/pricing

This. I use bitbucket too and I can't understand why people are still paying github when bitbucket does exactly the same and is free.

I will tell you one reason: Bitbucket is unbelievably slow where I live (Tokyo). Using it is mostly a matter of gnashing your teeth and waiting.

GitHub is actually painfully slow too; just not as slow.

That's the main reason I pay GitHub and use them for those projects where I need something more than just a git server for collaboration.

Re: Introducing unlimited private repositories

#617
post #492
post #439

Earlier quoted context omitted.

I've used Bitbucket in the past. They charge per-user[1], and their pricing is significantly better free for 5 users and then once you eclipse 5 users it's $1/user up to 100 users and then $200 for unlimited users. [1] - https://bitbucket.org/product/pricing

This. I use bitbucket too and I can't understand why people are still paying github when bitbucket does exactly the same and is free.

I will tell you one reason: Bitbucket is unbelievably slow where I live (Tokyo). Using it is mostly a matter of gnashing your teeth and waiting.

GitHub is actually painfully slow too; just not as slow.

That's the main reason I pay GitHub and use them for those projects where I need something more than just a git server for collaboration.

Re: Introducing unlimited private repositories

#618
post #413

Earlier quoted context omitted.

How could we convince you that at GitLab we take security very seriously?

Creating a Security page on the site to explain your infosec policies would go a long way. I like that we're able to view previous disclosures [1] and active security issues [2], but I had to dig a bit to find them. Surface those. [1] https://about.gitlab.com/vulnerability-acknowledgements/ [2] https://gitlab.com/gitlab-org/gitlab-ce/issues?label_name%5B...

Sorry for the late reply, we've been busy releasing https://about.gitlab.com/2016/05/11/git-repository-pricing/

Anyway, I've added most information to https://about.gitlab.com/disclosure/ with https://gitlab.com/gitlab-com/www-gitlab-com/commit/eab7e345...

That page is linked from https://about.gitlab.com/contact/

Re: Introducing unlimited private repositories

#620
post #413

Earlier quoted context omitted.

How could we convince you that at GitLab we take security very seriously?

Make a dedicated site on gitlab.com about security (make it bold) and about private repos. Some buzzwords: Countermeasures, security tracking, rate limiting, DDoS attacks, Backups... what do you do to ensure security, privacy or that nothing is lost? It's a littlebit in the dark. I would love to see comparisons between gitlab, bitbucket and github if possible (but I'm guessing that's not easy) or I would love to see…

Thanks for your input. I've added more security information on our website https://gitlab.com/gitlab-com/www-gitlab-com/commit/bb7deced...

We try to achieve a good reputation by taking security seriously every day and being responsive to disclosures.

Post reply on HN