Seems like he’s been pushed into using LLMs as a way to cope with the deluge of LLM-generated security reports.

  • fruitcantfly@programming.dev
    link
    fedilink
    arrow-up
    0
    ·
    15 hours ago

    Also, having critical software depend on one guy is not safe. We should avoid that. If critical software depends on one guy it should be phased out.

    Here are the percent of commits from the top committer in each repository you mentioned, as well as rsync, over the last 3 months:

    • rsync: 99.0%
    • restic: 93.2%
    • rclone: 87.5%
    • union: 82.9%
    • syncthing: 74.4%

    As you can see, each of this projects depends heavily on a single person, though to a lesser degree than rsync. That’s just the nature of most open-source software.

    Note that I excluded dependabot commits from the calculations and counted Claude commits as the lead developer for rsync

    • ExLisper@lemmy.curiana.net
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      14 hours ago

      How I imagine this:

      1. rsync gets end of life date
      2. People that rely on rsync start looking for alternatives
      3. They try to switch and figure out what functionality is missing
      4. They contribute to some of the alternative to fill the gaps

      For example, I’m about to setup some syncing for my homelab and I will not use rsync for that. That’s why talking about the state of rsync is important. As I said, it’s not about attacking the dev for not working hard enough. It’s about long term planning.

      • captcha_incorrect@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        13 hours ago

        I remember when the maintainer for discord.py stepped down. He eventually stepped back in because no one wanted took over the project and he didn’t want to see it die. This was before the current AI era, all someone had to do was continue to develop it.

        I think almost everyone will do step 2 and 3 but not step 4.

        • ExLisper@lemmy.curiana.net
          link
          fedilink
          arrow-up
          0
          ·
          13 hours ago

          The fact that open source exist and functions so well for decades shows that people do step 4. If no one wants to step in it usually means the project is not important.