3 ms·

Wow, I'd never heard of Rails before. What a great recommendation. /s Am I just a curmudgeon, or does every step that GitHub takes these days seem like wrong o

by Mizza 9y ago

Wow, I'd never heard of Rails before. What a great recommendation. /s Am I just a curmudgeon, or does every step that GitHub takes these days seem like wrong one? Everything, from small design changes, to the results of their discovery engines, to the pricing and offering of there paid services, just seems to get worse over time. As somebody who visits GitHub more than any other page, it makes me a bit said. I do hope they can turn it around or GitLab will come up on them fast.

allover 9y ago
Can you give specifics other than this new thing and pricing? I feel like discovery engines making obvious recommendations is actually a non-trivial problem to solve, I remember Spotify used to recommend me a lot of 'well duh' stuff in Discover Weekly. When just going off raw data, you can't really just 'not recommend' popular things. I routinely tell fairly aware co-workers about JS projects that have thousands of stars on Github that they've never heard of. (Also I'm kinda cynical of anyone 'not liking pricing', of course you don't, pricing models are designed to make you need to pay).
greysteil 9y ago
The stuff they announced today on dependency security feels like a really good step. They stopped short of saying they were going to resurrect OSVDB, but not far short. In the meantime, they're going to display a project's dependency graph in the insights tab, and in future will suggest fixes for any security vulnerabilities in it (i.e., insecure versions).
- alvesjtiago 9y ago
  The dependency security features really do look awesome. I've been working on a project called Octotrack (http://octotrack.tiagoalves.me http://octotrack.tiagoalves.me) for a while now whose objective is exactly that with other features for dependency management (currently only available for projects that use Bundler/Gemfile). It would be great to get your feedback.

by Mizza 9y ago

allover 9y ago

Can you give specifics other than this new thing and pricing? I feel like discovery engines making obvious recommendations is actually a non-trivial problem to solve, I remember Spotify used to recommend me a lot of 'well duh' stuff in Discover Weekly. When just going off raw data, you can't really just 'not recommend' popular things. I routinely tell fairly aware co-workers about JS projects that have thousands of stars on Github that they've never heard of. (Also I'm kinda cynical of anyone 'not liking pricing', of course you don't, pricing models are designed to make you need to pay).

greysteil 9y ago

The stuff they announced today on dependency security feels like a really good step. They stopped short of saying they were going to resurrect OSVDB, but not far short. In the meantime, they're going to display a project's dependency graph in the insights tab, and in future will suggest fixes for any security vulnerabilities in it (i.e., insecure versions).

alvesjtiago 9y ago
The dependency security features really do look awesome. I've been working on a project called Octotrack (http://octotrack.tiagoalves.me http://octotrack.tiagoalves.me) for a while now whose objective is exactly that with other features for dependency management (currently only available for projects that use Bundler/Gemfile). It would be great to get your feedback.