No they probably wanted to hear how great some random Arch derivatives that does that thing 3 people are talking about

I’m not comfortable that Fedora and derivatives give the same stability opportunity as Atomic distros

Atomic distros + distrobox/toolbx. Bluefin is a good start for general desktop or Bazzite for gaming (But Bluefin can be more stable, I use it for some games with steam in flatpak). If something breaks roll back to any release in the last 90 days with a single command. Install all of your packages in a distrobox (Arch if you need it). Otherwise in general Fedora is pretty good.

That issue is not good criticism, it’s rude and demanding and has no place in a hobby project. I’ve shown what good criticism would look like.

I AM NOT SAYING THE ISSUE IS INVALID. THE MAINTAINER ABSOLUTELY SHOULD RESPOND TO IT AS IT IS IMPORTANT. I FOUND THE WORDING RUDE AND ENTITLED WHICH MAKES THE ISSUE WAY LESS INVITING.

I like how if you misgender someone on here without being able to see their pronouns your entire instance may get defederated. However, apparently it’s okay to be arseholes to OSS maintainers.

I did some further reading into it. The maintainer might be an arseholes with high standards who doesn’t accept PRs or maybe they don’t have a lot of time.

Fucking hell this website is a waste of time.

exit

exit

I don’t understand how “appalled” being strong language is so controversial, maybe everyone here is just a rude little shit.

I would have worded it like so:

Hi, I’m concerned about the BLOBs used in this repo as they are a security risk, making the code less auditable. It looks like we could generate these BLOBs in a github action or something so we can keep the fast build process while making it easier to audit the code. I’m not exactly sure how to go about this myself but I’ve done similar things in other projects, maybe you could point me in the right direction as I am unfamiliar with the ventoy build process? Thanks for the really cool project, and hopefully we can sort this out easily. Looking forward to your response.

I did it with less anger and entitlement and in less words

I’m not saying don’t criticise it. It’s about communication. The language isn’t very good. See my other comments

Is this not rude:

I checked the code and I’m appalled. There are more BLOBs than source code

And this:

I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.

We didn’t like it when MS made an issue trying to direct ffmpeg

They should have opened with a complement or asked for directions if they didn’t know. In this message “Thank You” means fuck all

I didn’t say they’re wrong it’s the way they communicated which I found off-putting and Gordon Ramsay -esque

I mean if I got an issue that sounded that entitled and this is something I do in my spare time, I’d probably ignore it.

My point is they could have worded it better and it might have gotten a response. If you ask kindly about the BLOBs and maybe for some help to push you in the right direction instead of saying “I don’t know”, then it is fair to call the maintainer rude for ignoring it completely.

I haven’t read to far into this but the issue is completely devoid of contributors and maintainers. I find the wording of the issue quite concerning:

Due to the recent XZ-Utils drama I checked the code and I’m appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/cryptsetup https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/Unix/ventoy_unix https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/DMSETUP

There is no reason to have those not be build in the release process. Of course it’s convenient, they are prebuild, it’s fast and nobody has a problem with it.

Recent events however showed that these BLOBs can contain everything and nothing. The build instructions would not produce the exact same executable for everyone. It’s better to have GitHub build it on-push and use them out of the build cache.

I would do it myself, but unfortunately I’m not familiar enough with the Ventoy build process to actually do it. I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.

Thank you for reading this and I hope for a productive conversation

This is free software, they don’t owe you anything and this kind of language sounds angry and entitled. You can’t just Gordon Ramsay on someone else’s codebase.

Binary Large OBject

Also GitHub has full-text search and doesn’t filter profanities if you’re looking for material

Developers who are not willing to learn something new and not adapt are the worst

I think you mean people in general. Life is short, try some stuff, take risks

Only takes one person to do it. Especially with Saas there’s only the web platform.

The headline completely misses the point of Free Software as well. It’s about free as in freedom, not beer.

It’s FOSS, people can remove them

Only a spambot would ask someone ousting someone as a spambot for accusing someone of being a spambot who had claimed that they were accused of being a spambot!

Though only a spambot would respond to someone claiming to have been accused of being a spambot, accusing them of being a spambot