3 ms·
Here's a term you need to start saying to management of your company: "software supply chain risk". github just became a business risk and a software supply ch
by andrewstuart 3y ago
Here's a term you need to start saying to management of your company: "software supply chain risk".
github just became a business risk and a software supply chain risk.
I recently worked for a very large company that was 100% all in on github.
And now its clear that in an instant and single developer or perhaps the entire organisation can be finished as far as github goes.
Any CTO would now be negligent to have an organisational dependency/risk on github.
The future has to be companies getting out of the cloud, getting out of vendors who can inflict major business damage in an instant with no recourse on the basis of entirely unknowable decisions.
- FooBarWidget 3y agoOkay but usually businesses deal with this not by having no dependencies and doing everything themselves. Instead they establish business relationships that ensure they do have a recourse, such as through contractual obligations. Likewise, if the concern is that Github automatically bans you without a recourse, then my preferred solution is that they do introduce recourse. This could even be a paid option: I think it's entirely reasonable for them to ask an administration fee for the appeal process, just to cover the costs of having a human look at what's going on and providing a good explanation.
- icywolfy2 3y agoUse GitHub for Enterprise and self-host, like most modern companies.