this post was submitted on 28 Aug 2024
802 points (97.9% liked)

linuxmemes

21197 readers
45 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.

    • Please report posts and comments that break these rules!

    founded 1 year ago
    MODERATORS
    [email protected]
    [email protected]
    [email protected]
    802
    Seeing big companies take advantage of BSD or MIT licensed projects without sharing their contributions will always pain me. (lemmy.world)
    submitted 2 months ago* (last edited 2 months ago) by [email protected] to c/[email protected]
    82 comments fedilink hide all child comments
     
    you are viewing a single comment's thread
    view the rest of the comments
    [–] [email protected] 7 points 2 months ago* (last edited 2 months ago)

    We have a scanner that does that on every build.

    It blocks builds for dependencies with

    • licenses not acceptable to Legal
    • serious or critical vulnerabilities.
    • political messages, even if you agree with them
    • we may also add a criteria to block non-release dependencies.

    As a developer, you’re free to use anything that works

    I have yet to figure out how my company views contributing back to open source. I don’t know of anyone actively doing that, but it turns out we host a few originals of open source. I’ve been trying to improve development processes, get tools and dependencies up to date ….. but then I ran into things where it’s a bigger change because of the downstream opensource dependencies and because it’s not really owned by the company