3 ms·

Even without turnover, I've no idea how you're supposed to compete with the quality of top open source software. Maybe no one finds the bugs in your software, b

Even without turnover, I've no idea how you're supposed to compete with the quality of top open source software. Maybe no one finds the bugs in your software, but they're definitely there.

bob1029 6y ago
We don't try to compete with the quality of top open source software. Our stack fundamentally consists of: C# 8.0 / .NET Core 3.x / AspNetCore / Blazor / SQLite Of these, SQLite is arguably the most stellar example of what open source software can provide to the world. Everything else in our stack consists of in-house primitives built upon these foundational components.
- Godel_unicode 6y ago
  It's funny to me the number of developers who have effectively forgotten that Microsoft exists, and that it's possible to have your entire stack be provided by one company who directly sells it's software for profit.
- steverb 6y ago
  That's really interesting. My team's stack is the same except we use Azure SQl server instead of SQLite. I'd love to understand why you chose that. Feel free to hit my up at the address in my profile if you don't want to talk here.
  - baud147258 6y ago
    Perhaps the parent's situation ("software that runs within very secure financial networks" cf https://news.ycombinator.com/item?id=24747781 https://news.ycombinator.com/item?id=24747781) prevents them to rely on an external service?
    - bob1029 6y ago
      We cannot rely on anything outside the client's secure network. There are a few exceptional items that are allowed to talk to the internet, but our system's data persistence layer is not one of them. Effectively, our client's operations cannot rely on cloud services and all of the related last mile connectivity into their infrastructure. If AWS/Azure/et.al. go down, many of our customers are still able to continue operating without difficulty.
danielheath 6y ago
In the frontend space? When I go looking for a dependency, I check the license and I have a quick read of the code. Last time I did that was for autocomplete. I checked the most popular six options; in the space of 2 hours, I found obvious-from-reading-code bugs in all 6. None of them had a CLA signed by contributors, so there's really no evidence their code is genuinely available under the license they claim to offer. I wrote my own. It took about 3 hours initially plus 2-3 hours ironing out edge cases found over the following weeks. It only added 700 bytes to my bundle. Total time spent: 1 days work. Smaller code, loads fast, free from license issues, does exactly what I want.

Even without turnover, I've no idea how you're supposed to compete with the quality of top open source software. Maybe no one finds the bugs in your software, but they're definitely there.

bob1029 6y ago

We don't try to compete with the quality of top open source software. Our stack fundamentally consists of: C# 8.0 / .NET Core 3.x / AspNetCore / Blazor / SQLite Of these, SQLite is arguably the most stellar example of what open source software can provide to the world. Everything else in our stack consists of in-house primitives built upon these foundational components.

Godel_unicode 6y ago
It's funny to me the number of developers who have effectively forgotten that Microsoft exists, and that it's possible to have your entire stack be provided by one company who directly sells it's software for profit.
steverb 6y ago
That's really interesting. My team's stack is the same except we use Azure SQl server instead of SQLite. I'd love to understand why you chose that. Feel free to hit my up at the address in my profile if you don't want to talk here.
- baud147258 6y ago
  Perhaps the parent's situation ("software that runs within very secure financial networks" cf https://news.ycombinator.com/item?id=24747781 https://news.ycombinator.com/item?id=24747781) prevents them to rely on an external service?
  - bob1029 6y ago
    We cannot rely on anything outside the client's secure network. There are a few exceptional items that are allowed to talk to the internet, but our system's data persistence layer is not one of them. Effectively, our client's operations cannot rely on cloud services and all of the related last mile connectivity into their infrastructure. If AWS/Azure/et.al. go down, many of our customers are still able to continue operating without difficulty.

danielheath 6y ago

In the frontend space? When I go looking for a dependency, I check the license and I have a quick read of the code. Last time I did that was for autocomplete. I checked the most popular six options; in the space of 2 hours, I found obvious-from-reading-code bugs in all 6. None of them had a CLA signed by contributors, so there's really no evidence their code is genuinely available under the license they claim to offer. I wrote my own. It took about 3 hours initially plus 2-3 hours ironing out edge cases found over the following weeks. It only added 700 bytes to my bundle. Total time spent: 1 days work. Smaller code, loads fast, free from license issues, does exactly what I want.