zlacker

[return to "Tracking the Fake GitHub Star Black Market"]
1. ziml77+Kz[view] [source] 2023-03-18 14:06:34
>>kaeruc+(OP)
I'm surprised that Github stars are valuable enough to buy. Personally I never look at the star count because even if they were legit, they don't really tell me anything more useful than I get from looking at other things in the repo.

I tend to check the age difference between the earliest and latest commits because that lets me be sure it's not a project that someone spent a couple weeks coding up, dropped on github, and then forgot about. I'll also check the issues on there. I'm looking for more closed issues than open ones, but I'll also quickly scan over them to get a rough idea of how many are truly meaningful issues. I also get signals from the readme and docs. It's not a hard pass if there's issues with those, but it's certainly helpful to my opinion if they exist and are both clear and detailed.

◧◩
2. Chancy+CP[view] [source] 2023-03-18 16:07:20
>>ziml77+Kz
> dropped on github, and then forgot about.

I really wish GitHub would have some sort of flag for "stale" projects. I use your methods too (issues, dates, etc.), and I'm usually disappointed when search results bring up ghost projects. However, in a few instances, I found a project that was similar to an issue I was working on that went one step beyond where I was, and even though it was a ghost project, it helped. But in general, these projects don't help. I'm also disappointed that I'm thinking, "Hmmm, maybe LLMs can help..."

◧◩◪
3. UncleE+QS[view] [source] 2023-03-18 16:27:54
>>Chancy+CP
I have one project on GitHub that I use all the time as part of a script and only push changes when the python API breaks it. It is essentially “finished” and usually just needs a quick compile against the new python version whenever I upgrade the distro. I haven’t even had to touch for at least as long as GitHub required ssh keys so by all accounts this would be an abandoned project.

Now that I think about it — it is a python wrapper around a boost library and neither of those have made backwards incompatible changes in a long time which is quite suspicious.

◧◩◪◨
4. j1elo+Ju1[view] [source] 2023-03-18 20:24:12
>>UncleE+QS
Boost libs circa Ubuntu (14 or 16.04) had JSON parser that allowed comments, while the newer Boost in Ubuntu 20.04 (and I think already in 18.04) had "updated" it and then it didn't allow comments any more.

Just a small anecdote of Boost changing behavior that broke some of my stuff.

◧◩◪◨⬒
5. UncleE+Vx2[view] [source] 2023-03-19 07:25:56
>>j1elo+Ju1
I kind of expect that I’ll have to do some work at upgrade time but it’s been a while. Usually python is the culprit and can only remember boost breaking something once but that was a different project. The maintainer was quite nice on trying to help me figure it out but I don’t think I ever got it working the same again.
[go to top]