tex0

If the developer can have a local copy of the monorepo it's not a "large" codebase.

The interesting selling point about this, if the claims are substantial, is that nobody will be able to produce secure software without access to one of these models. Good for them $$$ ^^

Fossil has some really nice ideas (although I don't like the feature bloat), but when I tried to use it I ran into so many issues and/or bugs. With git on the other hand I can't remember ever hitting a bug in decades.

I don't really like git that much, but it works pretty well most of the time.

This is a cool tool, I like the idea. But the way `uc machine init` works under the hood is really scary. Lot's of `curl | bash` run as root.

While I would love to test this tool, this is not something I would run on any machine :/

Same here. Pretty amazing. Almost every game in my (large) Steam libarary runs out of the box. Performance is on par with Windows. This finally allowed me to ditch Windows.

And no, I don't bother with crap that needs a kernel level anti-cheat. Simply not for me.

If you don't like Go, then just let go. I hope nobody forces you to use it.

Some critique is definitely valid, but some of it just sounds like they didn't take the time to grasp the language. It's trade offs all the way. For example there is a lot I like about Rust, but still no my favorite language.

https://opensource.google/projects

I think all of those are using git and many Gerrit as well.

Maybe they need perforce support instead :P

Gerrit can do some of that.

That depends on your VCS. Some systems don't even allow you to "clone" anything. And yes, some of them enforce all kinds of ACLs.

That is pretty much what I'm doing with Steam, Proton and my Game Library. 99% the time it works just great.

Probably zero. And strike the non-SWE part. gpg isn't really easy to use.

Maybe git is just too complicated for average users (myself included).

The new GitHub CS is pretty great indeed. Still not on par with it's role model, but getting closer.

Thank you for reposting. I don't want to start bashing XZ, but I honestly wonder why it's been picked up so much despite the valid criticism.

As if the compression rate increase at medium levels were so significant over bzip2 or grip.

Yes, it comes pretty close. Well done!

Is the source code of the service behind proxy.golang.org actually open-source?

KeePass(X), Password Store/Gopass, pwSafe, ...

Plenty of good choices.

Why did people think that using a cloud based password manager (or for that matter: a closed source one) was ever a good idea?

Same here. In fact I've built a very similar tool because sed/awk/grep/find didn't quite cut it and it did help a me lot to get sh* done.

How do you know?

He's so right about this. git is terrible. I hope some day we see a successful successor.

That reminds me of Piper/CitC: https://cacm.acm.org/magazines/2016/7/204032-why-google-stor...

Packfiles give me PTSD. They are so notoriously hard to maintain on the large scale server side.

I really wish git wasn't using them.

I disagree. All the examples you mention are part of the software supply chain.

To me it doesn't matter if code comes in through a vendor, a dependency or is written in house.

It's all well within the responsibility of the organization owning and deploying the artifacts.

Welcome to dependency hell.

But then many packages are so trivial that they shouldn't even require a license.

Same goes for abandoned projects.

This serves as another example to me that governance and conflict resolution in the Debian project is really poor.

Maintainers are free to do whatever they want, even if it doesn't make any sense at all.

Running this kind of stuff costs serious money.

Of course they must see a way to make money with it in the long term.

Like they did with GitHub itself: as a data source for CoPilot ;)

Like fixing a recently discovered severe security issues affecting a large number of repositories?

That would be terrible indeed. But it might happen. Good to have a powerful tool at hand in that case.

I don't know their use case very well.

Maybe Perforce. Or didn't MS have their own in-house SCM as well?