this post was submitted on 03 Jul 2025
143 points (99.3% liked)
Fediverse
35347 readers
394 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
For those who were out of the loop:
What exactly is the idea of federated gitlab? Git is already inherently distributed and automagically mirroring to other remotes is generally like three lines in any CI syntax (and there is probably a precommit hook for it too).
Also: I can see a LOT of security issues with not having a centralized source of truth on what the commit hashes should be and so forth. is fedgit dot zip the source of truth for this app or fedgit dot ml or fedgit dot ca? Theoretically that is where signing comes into play but that gets back to: What advantage does a "fediverse" frontend have?
I think the federation was more about interacting with other instances. Like creating issues and pull-requests without needing to create a new account for every instance.
I think this would be useful, as reporting bugs on GitLabs can be annoying if you have to create an account first.
As one of the core contributors for even a moderately sized project on Github: HELL NO.
We already get more than enough drive by spam from everyone who just makes an account to complain that our code doesn't do something we never said it did. And if they don't even have to do that? Ugh.
I do firmly believe that more projects need to understand the implications of where they host something (similar to the IOS app that alerts you if ICE is in your area). But if someone can't be bothered to even use a throaway protonmail address to file a bug report or feature request? Quite frankly, what they have to say wouldn't have been worth our limited time anyway.
You don't know that, because you've never once heard what someone didn't say. Their time is limited too.
Oh, sure, and the spam box in my email might actually have a valuable offer for me!