452
submitted 1 week ago* (last edited 1 week ago) by minyaen@lemmy.ml to c/opensource@lemmy.ml

This doesn't surprise me at all... Just like bots in games. Selling a service that benefits another. Its shady, but definitely believable.

Also, what if this is an actual viable way to "market" for an open source project?

https://www.bleepingcomputer.com/news/security/over-31-million-fake-stars-on-github-projects-used-to-boost-rankings

top 50 comments
sorted by: hot top controversial new old
[-] B0rax@feddit.org 17 points 6 days ago

You can buy any metric on the web. Amazon reviews, YouTube subscribers and likes, X followers, Reddit karma, …. I am not surprised that GitHub stars are one of them.

[-] phar@lemmy.ml 26 points 6 days ago

I am not a programmer. But I have been using github as an end user for years, downloading programs I like and whatnot. Today I realized there are stars on github. Literally never even noticed.

[-] NotMyOldRedditName@lemmy.world 17 points 6 days ago

The stars are more important when you're a developer. It indicates interest in the project, and when it's a library you might want to use that translates into how well maintained it might be and what level of official and unofficial support you might get from it.

Other key things to look at are how often are they doing releases and committing changes, how long bugs are left open, if pull requests sit there forever without being merged in etc.

[-] lemmyingly@lemm.ee 4 points 6 days ago

And if the developers were to give up on the project, how likely it would be for someone to fork it and continue.

[-] logging_strict@lemmy.ml 0 points 6 days ago

An experienced developer could easily step in. The hold back is getting compensated for the effort rather than being forced to turn tricks on the local street corner (aka work a job).

This is why devs are walking away.

Companies offering jobs to maintainers rather than directing funding at them is nonsense. Gov'ts and companies will wake up as cracks start snowballing in their tech stack.

load more comments (1 replies)
[-] ILikeBoobies@lemmy.ca 2 points 6 days ago

If you’re trying to peddle malware then it’s a way to fake popularity

[-] logging_strict@lemmy.ml 1 points 6 days ago

That's unfair. Throwing out FUD doesn't make it true.

Why be in a rush to judge? Might wanna watch some projects which have used this tactic.

Might be legitimate projects are willing to do whatever to attract eye balls.

Just for shiats and giggles, keep an open mind.

[-] ILikeBoobies@lemmy.ca 3 points 5 days ago

I was pointing out a use case

[-] minyaen@lemmy.ml 2 points 6 days ago* (last edited 6 days ago)

Yeah, this is a pretty good gauge of what an honest star rating should represent.

[-] Dnb@lemmy.dbzer0.com 1 points 6 days ago

Tbh I never look at stars, but do at prs and issues

[-] NotMyOldRedditName@lemmy.world 1 points 6 days ago

Closed PRs and Closed issues?

What if it's a side project with 1 star, 0 issues (because no one made any) and no PRs because no ones done work on it?

[-] Dnb@lemmy.dbzer0.com 1 points 5 days ago

More so if spme software had dozens or hundreds of open issues/PRs for months that never get looked at I'll look elsewhere

Don't want unstable dependencies

[-] B0rax@feddit.org 2 points 6 days ago

Really does depend on what we are talking about. Some random software that is not critical? Sure. Some system breaking library that would take down my servers in case of malfunction? No bueno.

[-] logging_strict@lemmy.ml 1 points 6 days ago

Throwing out FUD.

The stars reflect the marketing effort put in. Has no correlation to the software quality or whether it's critical or not.

[-] logging_strict@lemmy.ml 1 points 6 days ago

Initially, the stats will reflect amount of marketing effort put into the project.

The marketing will attract both users and a flow of issues and PRs.

I've done zero marketing for my packages. And it shows ;-)

[-] BaumGeist@lemmy.ml 15 points 6 days ago

On the Caveat Emptor ("Let the buyer beware") side of things, I look at other metrics well before I rely on stars.

How many contributors does it have? How many active forks? How many pull requests? How many issues are open and how many get solved and how often and how lively are the discussions? When was the last merge? How active is the maintainer?

Stars might as well be facebook likes imo: when used as intended, they didn't say much more than "this is what the majority of people like" (surprise, I'm on lemmy bc I have other priorities than what's popular), now they mean nothing at all.

[-] desktop_user@lemmy.blahaj.zone 6 points 5 days ago

how is twidium managing to charge so much more?

[-] BradleyUffner@lemmy.world 10 points 5 days ago

Their stars are hand crafted from raw virginal pixels by blind monks using only their toes.

[-] toastal@lemmy.ml 8 points 6 days ago

Programming never needed these sorts of social media features in the first place. Do you part by getting your projects off of Microsoft’s social media platform used to try to sell you Copilot AI & take a cut of your donations to projects with Sponsors.

[-] djsp@lemmy.world 2 points 5 days ago

For reference, there is codeberg.org, operated by a German nonprofit and based on the open source Forgejo, among other open alternatives.

[-] toastal@lemmy.ml 0 points 5 days ago

I like hub.darcs.net & smeder.ee myself. Git is overrated.

[-] djsp@lemmy.world 1 points 5 days ago

Git is overrated.

That's interesting to read; I wasn't even aware of the existence of Darcs — or any other alternative to git supposedly worth considering, for that matter. Would you elaborate on it?

[-] toastal@lemmy.ml 2 points 5 days ago* (last edited 4 days ago)

Pijul is also worth looking at.

Fundamentally anything with a snapshot-based model is reliant on patch order mattering. As such you always end up with some centralized server. Pijul & Darcs are based on Patch Theory that says if Patch B is applied before or after Patch A assuming there is no conflict or dependence, it should not matter in a communicative way—that is to say the 1 + 2 ≡ 2 + 1. You can avoid a series of conflicts & better support a distibuted/decentralized development model if the order doesn’t matter.

[-] HiddenLayer555@lemmy.ml 1 points 5 days ago

Federated repo hosting website when?

[-] toastal@lemmy.ml 1 points 5 days ago

Radicle can do it presently but a lot folks dismissed them since they worked on cryptocurrency stuff independently. Weird thing to be hung up on considering they were separate endeavors, but folks are fickle.

[-] EmilieEvans@lemmy.ml 9 points 6 days ago

Also, what if this is an actual viable way to “market” for an open-source project?

I am fortunate enough to not market my stuff:

If somebody finds and can make use of it. Great.

In the other case who cares? Didn't hurt or cost me anything to publish it.

Fake GitHub stares have other implications: Typosquatting is a real issue and fake stars make it more convincing that it is the genuine project.

[-] Magnetic_dud@discuss.tchncs.de 4 points 5 days ago

Why a real person would star a project? When I star a project then my GitHub home is littered with activity from that project. I hate that, so I never star anything

[-] fxdave@lemmy.ml 4 points 5 days ago

you can turn off notifications from starred projects

[-] jagged_circle@feddit.nl 3 points 6 days ago

open collective has a minimum star limit to signup.

But they accepted our project even though we didn't meet it. I always thought it was silly, and was glad they were flexible.

[-] atridad@lemmy.atri.dad 1 points 5 days ago

Amazing. Good thing I don’t use GitHub :)

[-] nutsack@lemmy.world 1 points 6 days ago

shouldn't this sort of thing destroy your algorithm ranking

[-] Mubelotix@jlai.lu 5 points 5 days ago

Github is very naive and has 0 protection against spam-stars and multi-accounts.

load more comments
view more: next ›
this post was submitted on 31 Dec 2024
452 points (99.3% liked)

Open Source

31894 readers
503 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS