4 ms·

For the curious, this is an optional program at SourceForge being offered to developers as a way to monetize their work. The developer needs to specifically re

For the curious, this is an optional program at SourceForge being offered to developers as a way to monetize their work. The developer needs to specifically request it. SourceForge gets a cut, so does the developer. The installer is their first stab at this process and is using the bundling technology from Ask.com. As offer-based installers go, this one is about as good as it gets. It makes a single offer and has an Accept and Decline button with the user selecting whichever one they want (not a pre-checked box accepting the offer above a Next/Continue button). If accepted, the installer installs the offered software and it gets a standard entry in Windows' Add/Remove Programs that works as expected. If declined, the installer continues. The installer then downloads the originally-requested software. The two issues with the current installer are that (1) it is served in place of the requested file with no indication that a substitution is made as the user downloads and (2) it requests admin rights before it starts downloading the software, which can be a security issue. Roberto (who posted the article) has stated that they are working on #1 in terms of the text shown on SourceForge as you select to download and download. As for #2, there may be some ways to rework the installer so this is not an issue. I'll mention it to him when I speak to him. SourceForge has one other revenue-share program with developers where you place the SourceForge-branded download buttons on your own website that link to your downloads on SourceForge and you get a small cut of the ad revenue made from the download page. If I recall correctly, SourceForge has been losing money for a few years now. Dice Holdings picked up SourceForge and Slashdot while Geek.com kept ThinkGeek.com, so they are now separate entities. These new experiments are attempts to get SourceForge to be self-sustaining/profitable. Ad revenue alone likely won't cut it. Unfortunately, Google Code, Github and others don't offer the full breadth of services that SourceForge does for open source projects. Google Code, Github, and others have all ditched binary downloads, so SourceForge is one of the only providers to make binary downloads available to Windows and Mac user at no charge. This is why SourceForge is popular for real apps (FileZilla, Pidgin, PortableApps.com, etc) and Github is popular for components (node.js, jquery, rails, etc). The code zips available at other providers are of no use to end users. As full disclosure, I run PortableApps.com, one of SourceForge's largest projects pushing quite a few TBs of downloads through their mirror network. We make use of the SF-branded download buttons revenue share program but do not make use of nor have any plans to use the "enhanced" installers. Everything I've discussed here is already publicly available, I just thought it would be handy to have in one place.

gnargl 13y ago
Nobodys blaming SF for trying to make money. But for, as you said, THE OS binary distributioner, it is kinda suicide to remove the possibility to verify your download. No more checksums, just trust our "enhanced" installer. Besides, its just cheap and crude to close the comments for the SF blog post, just after some people started with some real arguments.
voltagex_ 13y ago
Thanks for PortableApps. It's the redirect and the inability to download the real exe for offline install that I have a problem with. I also have a huge problem with granting a glorified curl wrapper full administrative rights.
- JohnTHaller 13y ago
  You're welcome for PortableApps.com. I'm dropping Roberto a note about the possibility of doing a fully-integrated installer for really basic installs (NSIS-based, based on PortableApps.com code, using really basic INIs so folks can do an installer with the ease of a zip) as well as an NSIS drop-in to have the recommendations appear on a given page of an NSIS installer (by far the most popular installer used in open source software) so folks can use their existing NSIS installers and custom code for advanced installers. It'd be open source, of course, and both would contain the full installer on the initial download. This would help with security concerns and allow offline installs (possibly even skipping the offer if we code it to detect being offline) as well as silent and automated installs.
thecodeore 13y ago
Just wanted to add, since many people dont know, last month GitHub added a new feature called "Releases" that does allow you to attach binaries for projects https://github.com/blog/1547-release-your-software https://github.com/blog/1547-release-your-software
- JohnTHaller 13y ago
  In all the documentation and press materials, they're still referred to as zips, though. Do you know if they support proper uploads and downloads of EXE, MSI and DMGs directly? Github used to support that a while back and purposely disabled it. Google Code has recently begun disabling it due to 'abuse'.

gnargl 13y ago

Nobodys blaming SF for trying to make money. But for, as you said, THE OS binary distributioner, it is kinda suicide to remove the possibility to verify your download. No more checksums, just trust our "enhanced" installer. Besides, its just cheap and crude to close the comments for the SF blog post, just after some people started with some real arguments.

voltagex_ 13y ago

Thanks for PortableApps. It's the redirect and the inability to download the real exe for offline install that I have a problem with. I also have a huge problem with granting a glorified curl wrapper full administrative rights.

JohnTHaller 13y ago
You're welcome for PortableApps.com. I'm dropping Roberto a note about the possibility of doing a fully-integrated installer for really basic installs (NSIS-based, based on PortableApps.com code, using really basic INIs so folks can do an installer with the ease of a zip) as well as an NSIS drop-in to have the recommendations appear on a given page of an NSIS installer (by far the most popular installer used in open source software) so folks can use their existing NSIS installers and custom code for advanced installers. It'd be open source, of course, and both would contain the full installer on the initial download. This would help with security concerns and allow offline installs (possibly even skipping the offer if we code it to detect being offline) as well as silent and automated installs.

thecodeore 13y ago

Just wanted to add, since many people dont know, last month GitHub added a new feature called "Releases" that does allow you to attach binaries for projects https://github.com/blog/1547-release-your-software https://github.com/blog/1547-release-your-software

JohnTHaller 13y ago
In all the documentation and press materials, they're still referred to as zips, though. Do you know if they support proper uploads and downloads of EXE, MSI and DMGs directly? Github used to support that a while back and purposely disabled it. Google Code has recently begun disabling it due to 'abuse'.