Live data from Hacker News

Zed Editor automatically downloads binaries and NPM packages without consent

old.reddit.com

71–80 of 183 posts

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#71
This broke Zed for me and had to go back to Neovim at my workspace. The corporate AV software was going crazy with all these automated downloads and installations. It wasn’t blocking them but just vetting them was taking so long, I just didn’t find it worth using

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#72
post #3

[flagged]

Zed is OSS but not free. There's a company behind it, not volunteers. They are doing quite some marketing lately. I don't see anything wrong with calling the current issue "completely unacceptable". Forced opt-in is what happens if the language is not offensive.

Interesting. Do paying customers get a different bug tracker from the open source repos or do they all get directed to the same place? If people are paying for this editor then the tone may make a lot more sense.

I can't find anything about a commercial offering so I don't know what the non-free version entails.

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#73
post #65
post #38

Earlier quoted context omitted.

I don’t want that. Popups are one of the reasons I stopped using VSCode. They drive me nuts. Just let me write code.

Just let others silently run code on my computer? Sorry, but not for me.

Isn't that the point of downloading an editor in the first place? Not having to write your own editor code?

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#74
post #37

Earlier quoted context omitted.

No wonder. Of all the languages I code in in VSCode, Golang is the most frustrating to use as I can’t jump to definitions with Cmd + Click the way I can in JS, PHP or Java. It there a decent alternative for Golang on the Visual Studio Code marketplace?

Jetbrains has a decent golang IDE. I don't use it because I use Vim. Vim's not for everyone.

Did you try IdeaVim?

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#75

I don't really see the big deal here. Who wants to approve and configure all of their language servers? If you open a file for that language, is there ever a time you would deny the download? I just don't want a huge amount of popups like VSCode. Also, the binaries are downloaded from their release on github. As long as that is secure I don't see a problem.

I usually don't use language servers at all. AI auto complete does the same for me faster... So yes, I would like to not download any of them.

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#76
post #67
post #3

[flagged]

I really wish these "torch and pitchfork" posts were declared off-topic. A discussion on what/when to auto-download and how would be useful, but comments on these kind of submissions are almost always just ranting/complaining about how bad $x is, what idiots people are, and things like this. > And people wonder why foss devs burn out. I have slowly become convinced that the open source community has been infiltrated…

Turning issue trackers into Emoji riddled social media platforms will do that alright.

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#77
post #58

Earlier quoted context omitted.

> I don't really see the big deal here. Who wants to approve and configure all of their language servers? everyone > If you open a file for that language, is there ever a time you would deny the download? every time default should be offline imo. want to download something? do it manually and place in folder etc

Just migrated from Vim to NeoVim. Downloading and configuring all the various LSPs has genuinely been one of the most frustrating aspects.

just use mason

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#78

Earlier quoted context omitted.

Zed is OSS but not free. There's a company behind it, not volunteers. They are doing quite some marketing lately. I don't see anything wrong with calling the current issue "completely unacceptable". Forced opt-in is what happens if the language is not offensive.

Interesting. Do paying customers get a different bug tracker from the open source repos or do they all get directed to the same place? If people are paying for this editor then the tone may make a lot more sense. I can't find anything about a commercial offering so I don't know what the non-free version entails.

https://zed.dev/faq#how-will-you-make-money

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#79

I don't really see the big deal here. Who wants to approve and configure all of their language servers? If you open a file for that language, is there ever a time you would deny the download? I just don't want a huge amount of popups like VSCode. Also, the binaries are downloaded from their release on github. As long as that is secure I don't see a problem.

> I don't really see the big deal here. Who wants to approve and configure all of their language servers? everyone > If you open a file for that language, is there ever a time you would deny the download? every time default should be offline imo. want to download something? do it manually and place in folder etc

> everyone

Are you really so self-centered that you can't imagine anyone doesn't care?

I'll raise my hand and say I personally am happy to trust Zed and am fine with auto-installing whatever binaries they propose.

I do think it's reasonable to have an option for people with different security postures, but don't assume you speak for everyone.

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#80

I don't get why having a modal for each tool asking for consent is too hard.

Because it would turn into the popup fest that is vscode.

I can't remember the last time I saw a popup in vscode, maybe last year.
Post reply on HN