Seems like he’s been pushed into using LLMs as a way to cope with the deluge of LLM-generated security reports.

  • Zos_Kia@jlai.lu
    link
    fedilink
    arrow-up
    16
    ·
    18 小时前

    But where will the maintainers for these alternatives come from, when barely anybody has stepped up in the 30 years of rsync’s existence? Your comment implies that tridge didn’t call for help before, which is far from the truth.

    This is thankless maintenance on critical software, not some *-arr toy project for hobbyist self-hosters.

    • supersquirrel@sopuli.xyz
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      14 小时前

      But where will the maintainers for these alternatives come from, when barely anybody has stepped up in the 30 years of rsync’s existence?

      Universal Healthcare would increase the pool of willing developers by an order of magnitude here.

          • Zos_Kia@jlai.lu
            link
            fedilink
            arrow-up
            5
            ·
            13 小时前

            Oh man I’m like super agreeing with you. Also I’m in a place that actually has universal healthcare, so it’s not like it’s unworkable

      • fruitcantfly@programming.dev
        link
        fedilink
        arrow-up
        2
        ·
        edit-2
        13 小时前

        Universal Healthcare would increase the pool of willing developers by an order of magnitude here.

        I’m not so sure. The problem is not a lack of developers. The problem is a lack of developers interested in working on rsync, or on any other specific project you can name. Most developers would rather work on their own projects.

        I would also question whether or not universal healthcare (though unquestionably a good thing) would actually result in such an increase in available developers. The following study looked at the geographical distribution of OSS developers in 2021, via Github contributions, and found that the US had a similar number of OSS developers per capita compared to similar countries that do have universal healthcare (see table 2):

        https://www.sciencedirect.com/science/article/pii/S0040162522000105

        • supersquirrel@sopuli.xyz
          link
          fedilink
          arrow-up
          4
          ·
          edit-2
          13 小时前

          Github and the whole culture that it came out of it used to (it feels sooooo good to say that in the past tense) be globally hinged on Silicon Valley, why would you not expect to see a anomalously high number of US developers on it?

          • fruitcantfly@programming.dev
            link
            fedilink
            arrow-up
            2
            ·
            12 小时前

            That’s definitely a possibility, along with the possibility that countries with worse English language skills might be underrepresented on GitHub, despite having universal healthcare. Conversely, if the US is over-represented on GitHub, then the pool of US developers who are not already active on GitHub may also be depleted compared to other countries. However, that is not something we can read out of the available evidence.

            The most we can conclude is probably that the US getting universal healthcare might result in an increase in available OSS developers, depending on which assumptions turn out to be correct, but suggesting that it would lead to an order of magnitude increase is surely premature

            • supersquirrel@sopuli.xyz
              link
              fedilink
              arrow-up
              2
              ·
              edit-2
              12 小时前

              suggesting that it would lead to an order of magnitude increase is surely premature

              The US is continuing to worsen in performance on meaures of small business entrepreneurship in essentially all industries in the US, software and software adjacent industries are no different especially if you don’t get distracted by the AI bubble inflating that value of a bunch of illusions claiming to be businesses.

              It is easy to see how the inability of the average person to try a new idea, or risk taking on a project that may not pay off immediately translates directly to a lack of available developers for open source software projects.

              The impact of Universal Healthcare would be huge for open source development in the US, the amount of programmers that would be pushed over the line from “just making ends meet while having a work life balance” to “ok maybe I could devote some time to open source development”.

              Don’t get me wrong though, I think we need to normalize straight up paying developers for Open Source Development. Just because it is open source doesn’t mean it doesn’t take labor, that is not the argument I am making.

              https://www.commonwealthfund.org/publications/issue-briefs/2018/oct/affordable-care-act-impact-small-business

    • ExLisper@lemmy.curiana.net
      link
      fedilink
      arrow-up
      7
      ·
      edit-2
      18 小时前

      https://github.com/rclone/rclone

      https://github.com/restic/restic

      https://github.com/bcpierce00/unison

      https://syncthing.net/

      The thing with old, critical software is that after some time people don’t really want to dig through decades of C code and prefer to write something new using modern tools. Those projects get plenty of support because people actually do want to work on them. If no one wants to work on rsync than what the maintainer is doing now is just prolong it’s agony a couple of years. I would say he should do the minimum work, announce end of life date and move on. People that need tools like rsync will develop something.

      Also, having critical software depend on one guy is not safe. We should avoid that. If critical software depends on one guy it should be phased out.

      • fruitcantfly@programming.dev
        link
        fedilink
        arrow-up
        5
        ·
        18 小时前

        Also, having critical software depend on one guy is not safe. We should avoid that. If critical software depends on one guy it should be phased out.

        Here are the percent of commits from the top committer in each repository you mentioned, as well as rsync, over the last 3 months:

        • rsync: 99.0%
        • restic: 93.2%
        • rclone: 87.5%
        • union: 82.9%
        • syncthing: 74.4%

        As you can see, each of this projects depends heavily on a single person, though to a lesser degree than rsync. That’s just the nature of most open-source software.

        Note that I excluded dependabot commits from the calculations and counted Claude commits as the lead developer for rsync

        • ExLisper@lemmy.curiana.net
          link
          fedilink
          arrow-up
          2
          ·
          edit-2
          17 小时前

          How I imagine this:

          1. rsync gets end of life date
          2. People that rely on rsync start looking for alternatives
          3. They try to switch and figure out what functionality is missing
          4. They contribute to some of the alternative to fill the gaps

          For example, I’m about to setup some syncing for my homelab and I will not use rsync for that. That’s why talking about the state of rsync is important. As I said, it’s not about attacking the dev for not working hard enough. It’s about long term planning.

          • captcha_incorrect@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            16 小时前

            I remember when the maintainer for discord.py stepped down. He eventually stepped back in because no one wanted took over the project and he didn’t want to see it die. This was before the current AI era, all someone had to do was continue to develop it.

            I think almost everyone will do step 2 and 3 but not step 4.

            • ExLisper@lemmy.curiana.net
              link
              fedilink
              arrow-up
              4
              ·
              16 小时前

              The fact that open source exist and functions so well for decades shows that people do step 4. If no one wants to step in it usually means the project is not important.

      • wewbull@feddit.uk
        link
        fedilink
        English
        arrow-up
        3
        ·
        18 小时前

        The trouble with some of those projects (e.g. unison and sun thing) is that they don’t solve the same problem, not really.

        A rewrite with modern tooling would be better done if it was incremental.