3 ms·

I empathize with the author (on more than one level, an LDAP agent in Javascript sounds like more trouble than it's worth and his suggestion to use Go makes sen

I empathize with the author (on more than one level, an LDAP agent in Javascript sounds like more trouble than it's worth and his suggestion to use Go makes sense), and while this kind of email is inexcusable, it's ultimately a risk of being on the internet. To be clear, I don't want to sound callous or say that this is, in the long term, the cost of doing business in open source (it absolutely should not be); but if you're a person with a publicly-routable email (say, via git commiter or author metadata), on a long enough timeline, someone awful's liable to find it and use it maliciously. My opinion (admittedly, not having been on the receiving end of something this pointlessly awful) is that it's better not to fold to these kinds of attacks. These people are basically schoolyard bullies, and usually attention-seekers. Validating their attempts only encourages more behaviour like this. I hope the former maintainer is doing well, and I hope this message doesn't come off as disrespectful or harmful. If it does, I'm very open to hearing about alternative approaches.

zzo38computer 2y ago
About LDAP and what programming language should be used, I am not familiar enough with that program to answer the question. I agree with you that it is generally better to not to fold to these kinds of attacks. However, the README.md does mention other reason why they would not really want to maintain it for sure anyways. Furthermore, the maintainer can make their own decision about what to do with it (whether or not other people agree with it). And, since it is FOSS, it is not much of the problem if the maintainer decides to stop maintaining it, since FOSS is possible to fork the project and other people to work on it too, anyways. This is not an excuse for writing such a bad email message, but nevertheless someone might do so and therefore you will have to decide how to deal with it. (I think it is best to ignore it, but of course everything will influence anyone)
acomjean 2y ago
It sounds like they had a foot out the door on this project anyway. You make a point that we shouldn't just cave to any Jerk that comes along and used your code, which makes some sense. There is a silent user majority that appreciates these projects (or doesn't think enough about them). I'd advocate saying thanks, but if everyone did that might be a time suck for the developer, so maybe use the "star" if on github, or contribute if that is an option.
soulchild77 2y ago
What exactly makes Go more suitable for building LDAP clients than any other language, including JS? I've been running ldapjs in production for 4 years now (it's basically a web-based LDAP frontend) and it's been rock-solid.

zzo38computer 2y ago

About LDAP and what programming language should be used, I am not familiar enough with that program to answer the question. I agree with you that it is generally better to not to fold to these kinds of attacks. However, the README.md does mention other reason why they would not really want to maintain it for sure anyways. Furthermore, the maintainer can make their own decision about what to do with it (whether or not other people agree with it). And, since it is FOSS, it is not much of the problem if the maintainer decides to stop maintaining it, since FOSS is possible to fork the project and other people to work on it too, anyways. This is not an excuse for writing such a bad email message, but nevertheless someone might do so and therefore you will have to decide how to deal with it. (I think it is best to ignore it, but of course everything will influence anyone)

acomjean 2y ago

It sounds like they had a foot out the door on this project anyway. You make a point that we shouldn't just cave to any Jerk that comes along and used your code, which makes some sense. There is a silent user majority that appreciates these projects (or doesn't think enough about them). I'd advocate saying thanks, but if everyone did that might be a time suck for the developer, so maybe use the "star" if on github, or contribute if that is an option.

soulchild77 2y ago

What exactly makes Go more suitable for building LDAP clients than any other language, including JS? I've been running ldapjs in production for 4 years now (it's basically a web-based LDAP frontend) and it's been rock-solid.