4 ms·

I've tried it. I've failed at it. Halite is a libsodium wrapper for PHP projects that emphasizes ease-of-use and difficulty to misuse: https://github.com/parag

I've tried it. I've failed at it. Halite is a libsodium wrapper for PHP projects that emphasizes ease-of-use and difficulty to misuse: https://github.com/paragonie/halite https://github.com/paragonie/halite CMS Airship is a secure-by-default content management system (think WordPress, Drupal, Joomla, etc.): https://github.com/paragonie/airship https://github.com/paragonie/airship Both projects are released under GPL but offer commercial licenses. In two years, I've only had one person ever inquire about a commercial license, and they backed out. One of the libraries I wrote has an installed base of (not counting WordPress) over 28 million, yet I rarely hear from its users: https://packagist.org/packages/paragonie/random_compat https://packagist.org/packages/paragonie/random_compat The barrier isn't legal or philosophical, it's that a lot of very useful open source software (especially libraries that developers interface with) are infrastructure rather than window dressing, which is largely invisible to organizations. If you only develop window-dressing libraries, then the stuff 'patio11 has said here over the years might hold true. But if you're trying to build a more secure Internet by giving developers better tools, nobody wants to pay you for that.

mrleinad 9y ago
Do you have any stats on how many people use the first two products?
- CiPHPerCoder 9y ago
  Roughly 15,000 for Halite https://packagist.org/packages/paragonie/halite https://packagist.org/packages/paragonie/halite Less than 10 for Airship. There's a lot of reasons for that, though (aside from the fact that we built it to be Tor-friendly, so it's nontrivial to measure how many installs exist in the world): We only supported PostgreSQL and only users capable of installing libsodium from PECL could use it. PHP 7.2 will make it possible for everyone to use Airship version 2, and MySQL 8 will add CTEs so we might be able to support the more mainstream database. https://wiki.php.net/rfc/libsodium https://wiki.php.net/rfc/libsodium
- deleted 9y ago
  [deleted]
JoelSanchez 9y ago
I'm a Laravel developer and I know about random_compat because of the infamous "There is no suitable CSPRNG installed on your system" message. So I guess it's Wordpress, Laravel, and maybe Symfony too?
- CiPHPerCoder 9y ago
  Laravel and Symfony get counted through Packagist. WordPress does not. Basically, 28 million + (number of WordPress 4.4+ installs) = total installed base of random_compat
arikr 9y ago
> But if you're trying to build a more secure Internet by giving developers better tools, nobody wants to pay you for that. Sounds like you might enjoy working at https://protocol.ai/ https://protocol.ai/
jdc0589 9y ago
> I rarely hear from it's users that's not necessarily a bad thing. Those sound like libs with pretty simple responsibilities, so if they work great there may just not be any real opportunity for feature requests or feedback. With a backported shim (like at least one of those), I'd honestly take a silent userbase as a sign of success if you know there are downloads/installs.

mrleinad 9y ago

Do you have any stats on how many people use the first two products?

CiPHPerCoder 9y ago
Roughly 15,000 for Halite https://packagist.org/packages/paragonie/halite https://packagist.org/packages/paragonie/halite Less than 10 for Airship. There's a lot of reasons for that, though (aside from the fact that we built it to be Tor-friendly, so it's nontrivial to measure how many installs exist in the world): We only supported PostgreSQL and only users capable of installing libsodium from PECL could use it. PHP 7.2 will make it possible for everyone to use Airship version 2, and MySQL 8 will add CTEs so we might be able to support the more mainstream database. https://wiki.php.net/rfc/libsodium https://wiki.php.net/rfc/libsodium
deleted 9y ago
[deleted]

JoelSanchez 9y ago

I'm a Laravel developer and I know about random_compat because of the infamous "There is no suitable CSPRNG installed on your system" message. So I guess it's Wordpress, Laravel, and maybe Symfony too?

CiPHPerCoder 9y ago
Laravel and Symfony get counted through Packagist. WordPress does not. Basically, 28 million + (number of WordPress 4.4+ installs) = total installed base of random_compat

arikr 9y ago

> But if you're trying to build a more secure Internet by giving developers better tools, nobody wants to pay you for that. Sounds like you might enjoy working at https://protocol.ai/ https://protocol.ai/

jdc0589 9y ago

> I rarely hear from it's users that's not necessarily a bad thing. Those sound like libs with pretty simple responsibilities, so if they work great there may just not be any real opportunity for feature requests or feedback. With a backported shim (like at least one of those), I'd honestly take a silent userbase as a sign of success if you know there are downloads/installs.