I need to add/update contribution guidelines for some #oss i'm maintaining.
- https://github.com/candoumbe/Pipelines
- https://github.com/candoumbe/DataFilters
- https://github.com/candoumbe/Candoumbe.Types
Can anyone point me to a good example of contribution guidelines ? What I would like is to have something that clearly advertised that any contribution will be under the same licence as the library ?
With all the #moq #sponsorship controversy, it's something I would like to address (just in case) cause you never know.
#oss #moq #sponsorship #dotnet
Weeee! I spent yesterday afternoon swapping out NSubstitute for Moq in some unit tests. #moq
@maartenballiauw I wouldn’t be surprised if their plan is not to enhance #moq but to simply periodically push mainline changes from the official repo to their fork, excluding the personal info changes. Essentially own a very popular repo for the minimum required amount of work.
https://www.reddit.com/r/dotnet/comments/15ljdcc/does_moq_in_its_latest_version_extract_and_send/ - #MoQ got caught including #spyware. Though the spyware is now also open-source, it's still there. https://github.com/hassanhabib/CleanMoq is a spyware-free fork or move to #NSubstitute.
See also:
- https://dev.to/pbouillon/the-moq-gate-you-either-die-a-hero-8
- https://www.nuget.org/packages/CleanMoq
- https://nsubstitute.github.io/
@firewyre @carlfranklin I'm looking at #NSubstitute and #FakeItEasy this weekend. Both have features that #MOQ lacks. But they both feel different and weird. There was a time when #RhinoMocks was it and everything else felt different and weird.
#nsubstitute #fakeiteasy #moq #rhinomocks
Pathetic. #SponsorLink
AWS withdraws sponsorship for #opensource project #Moq amid data collection controversy #privacy #cybersecurity #infosec https://www.bleepingcomputer.com/news/security/amazon-aws-withdraws-moq-sponsorship-amid-data-collection-controversy/ @BleepingComputer @axsharma
"The SponsorLink DLLs, which collect hashes of email addresses to send to SponsorLink's CDN, contain obfuscated code that goes against Moq’s open-source principles" https://www.techradar.com/pro/top-open-source-project-moq-slammed-for-secretly-collecting-user-data @techradar
Moq testing framework under fire for phone-home SponsorLink monetization https://devclass.com/2023/08/10/moq-testing-framework-under-fire-for-phone-home-sponsorlink-monetization/
#infosec #cybersecurity #privacy #moq #opensource #sponsorlink
Regarding the recent #moq #sponsorship drama, my hope is that it will be a wake-up call (as it was for me) to help supporting projects and people in the #dotnet ecosystem.
Also that it will help the #dotnet ecosystem to further ease sponsoring of projects, as stated in my comment on the issue: https://github.com/moq/moq/issues/1374#issuecomment-1674345800
I implore those rushing to abandon #moq to do more than simply switch to another mocking tool.
Moq can certainly be used as a used tool for quality tests. However, that’s extremely rare. The library does a lot of things that provide a very messy and verbose way to do things you shouldn’t be doing in unit tests.
So #moq was a complication I didn’t need today. Not going to criticise anyone for trying to increase sponsorship of OSS projects, but this was a great example of how not to do it. Hope people don’t keep piling on and remember that it’s an incredible library, but trust is easily lost
I saw an article a while back to the effect that "this Free Open-source software that you install and don't pay for is not actually a "supply chain" at all, it's more like a sofa that you found out by the dumpster and appropriated. "
Or something like that. It seems relevant today, does anyone recall the article and link more specifically?
Kaikenlaista säätöä tulee näköjään vastaan. #moq palikka, ilmeisesti yleisesti käytössä .NET turailujen testauksessa, alkoi keräämään käyttäjien sähköposteja kyselemättä versiossa 4.20.
Aika villejä ratkaisuja, ja voin hyvin kuvitella miten tuo on vaikuttanut nopeasti katsottuna hyvältä idealta. Mutta noiden kanssa on kyllä hyvä olla vähän hereillä.
@bradwilson We're staying on #dotnet #moq Moq 3.18 for now. Will wait a week and see how things develop before taking action.
Ugh, the #moq library for #dotnet with 4.20 started collecting data on dev machines and blocking builds for some amount of time. While I understand that open source development is burden and contributors should get support from organizations using that software in production just for free, punishing everyone is no go.
I am reading the situation details with #Moq and #SponsorLink. It is so sad that the author/maintainer of a famous project was getting so little $$ income... and it is so sad that he decided to do something so brutal. I am afraid that it killed all trust in that project. Mass exodus follows.
https://www.reddit.com/r/dotnet/comments/15ljdcc/does_moq_in_its_latest_version_extract_and_send/
Định nghĩa khái niệm MOQ là gì? Tìm hiểu kiến thức từ A - Z
MOQ là viết tắt của từ tiếng Anh – "Minimum Order Quantity". MOQ là số lượng đặt hàng tối thiểu bạn cần đặt của một đơn vị cung cấp hàng hóa. Tìm hiểu thêm!
Web: https://hoangphongorder.com/chuyen-muc/tin-tuc/moq-la-gi
#moqlagi #moq #hoangphongorder
Định nghĩa khái niệm MOQ là gì? Tìm hiểu kiến thức từ A - Z
MOQ là viết tắt của từ tiếng Anh – "Minimum Order Quantity". MOQ là số lượng đặt hàng tối thiểu bạn cần đặt của một đơn vị cung cấp hàng hóa. Tìm hiểu thêm!
Web: https://hoangphongorder.com/chuyen-muc/tin-tuc/moq-la-gi
#moqlagi #moq #hoangphongorder