this post was submitted on 31 Dec 2024
428 points (99.1% liked)

Open Source

31865 readers
63 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
 

This doesn't surprise me at all... Just like bots in games. Selling a service that benefits another. Its shady, but definitely believable.

Also, what if this is an actual viable way to "market" for an open source project?

https://www.bleepingcomputer.com/news/security/over-31-million-fake-stars-on-github-projects-used-to-boost-rankings

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 16 points 3 days ago (4 children)

The stars are more important when you're a developer. It indicates interest in the project, and when it's a library you might want to use that translates into how well maintained it might be and what level of official and unofficial support you might get from it.

Other key things to look at are how often are they doing releases and committing changes, how long bugs are left open, if pull requests sit there forever without being merged in etc.

[–] [email protected] 4 points 3 days ago (2 children)

And if the developers were to give up on the project, how likely it would be for someone to fork it and continue.

[–] [email protected] 0 points 3 days ago

An experienced developer could easily step in. The hold back is getting compensated for the effort rather than being forced to turn tricks on the local street corner (aka work a job).

This is why devs are walking away.

Companies offering jobs to maintainers rather than directing funding at them is nonsense. Gov'ts and companies will wake up as cracks start snowballing in their tech stack.

[–] [email protected] 0 points 3 days ago

Ya, that's a really good point as well.

[–] [email protected] 1 points 3 days ago (1 children)

If you’re trying to peddle malware then it’s a way to fake popularity

[–] [email protected] 1 points 3 days ago (1 children)

That's unfair. Throwing out FUD doesn't make it true.

Why be in a rush to judge? Might wanna watch some projects which have used this tactic.

Might be legitimate projects are willing to do whatever to attract eye balls.

Just for shiats and giggles, keep an open mind.

[–] [email protected] 2 points 3 days ago

I was pointing out a use case

[–] [email protected] 2 points 3 days ago* (last edited 3 days ago)

Yeah, this is a pretty good gauge of what an honest star rating should represent.

[–] [email protected] 1 points 3 days ago (1 children)

Tbh I never look at stars, but do at prs and issues

[–] [email protected] 1 points 3 days ago (3 children)

Closed PRs and Closed issues?

What if it's a side project with 1 star, 0 issues (because no one made any) and no PRs because no ones done work on it?

[–] [email protected] 1 points 2 days ago

More so if spme software had dozens or hundreds of open issues/PRs for months that never get looked at I'll look elsewhere

Don't want unstable dependencies

[–] [email protected] 2 points 3 days ago (1 children)

Really does depend on what we are talking about. Some random software that is not critical? Sure. Some system breaking library that would take down my servers in case of malfunction? No bueno.

[–] [email protected] 1 points 3 days ago

Throwing out FUD.

The stars reflect the marketing effort put in. Has no correlation to the software quality or whether it's critical or not.

[–] [email protected] 1 points 3 days ago

Initially, the stats will reflect amount of marketing effort put into the project.

The marketing will attract both users and a flow of issues and PRs.

I've done zero marketing for my packages. And it shows ;-)