| Newsgroups |
gmane.os.freebsd.stable |
| Message-ID |
<[email protected]> |
Am 23.01.26 um 10:21 schrieb Tomoaki AOKI:
> Upcoming (hopefully) moving from GitHub to Forgejo managed by
> FreeBSD project could change the situation, but it's still
> not official. I'm thinking about how my workflow should be
> on the switch.
I contributed to Forgejo for a while (tried to improve the HTTPS setup
instructions but was frustrated by a slow/haphazard review process and
gave up), so FWIW my impressions:
It's a project that it constrained by developer time, which has
consequences:
* Not all parts of the code have a maintainer. This is partly due to the
fact that Forgejo is a fork of a fork.
* The CVE track record shows that they do care (and that they do have a
working CVE process), but also that they did have two remotely
exploitable vulnerabilities in the past three years and needed roughly a
month to fix each one.
Sadlys, I don't know an alternative that I can recommend.
I did a quick search and dug up some web sites with promising leads, but
I can't do the heavy lifting and evaluate them, so I'm just listing my
results in case anybody can follow up on these:
https://www.stackhero.io/en-US/#services
Open source managed services, preinstalled, on a VServer.
GitLab would be the code collaboration tool, but they do offer more
services, many of which could serve any open-source project with server
needs.
They do cost money.
https://www.wearedevelopers.com/en/magazine/298/top-github-alternatives
There are too many useless Top Ten Alternatives lists on the web, but
this one is actually useful and has interesting entries.
My take on each:
GitLab is good but requires a big server and administration.
BitBucket - yeah, Atlassian products give you everything you need but
are a pain to use.
OneDev - no idea. Having CI/CD and Kanban sounds useful.
Gog - tried it once, the setup was a bit too painful and I went to
Forgejo. YMMV.
Codeberg - that's Forgejo plus community and issue tracking. Not sure
how much beyond Forgejo there is.
Radicle - peer-to-peer collaboration based on git. That means the
development workflow does not require a hosting provider anymore, which
I find intriguing, but YMMV.
Gitea - Forgejo was forked from there. Prioritizes features over
security or reliability.
Google Cloud, AWS CodeCommit - I guess these are too commercial for
Open-Source collaboration.
Launchpad - no idea. I don't like it because I don't like Canonical, but
YMMV.
Hope this helps somebody.
Regards, and back to lurking,
Jo