4 ms·
> but putting their modified source code on some "archived" GitHub or similar would have been easy and free. You still need to set up mirroring to keep it up-
by piaste 5y ago
> but putting their modified source code on some "archived" GitHub or similar would have been easy and free.
You still need to set up mirroring to keep it up-to-date, and janitor tags so that it matches whatever the customer actually received.
Much more importantly, you run the risk of a classic 'whoops I pushed an API key' blunder if your code gets auto-mirrored to a public repo.
Writing "if you're a human and you want the source code we'll give it to you" costs them about thirty seconds, satisfies the FSF, and carries zero risks.
- prepend 5y ago> Much more importantly, you run the risk of a classic 'whoops I pushed an API key' blunder if your code gets auto-mirrored to a public repo. Thousands of competent projects and millions of incompetent projects figured it out. This is not a reason to distribute source code digitally. Any use of this reasoning just makes the user seem stupid and unable to reduce the risk on this trivial problem.