DEV Community

Discussion on: This space available for rent

Collapse
 
moopet profile image
Ben Sinclair

I think it's a pretty terrible idea.

If this was ever going to happen I could have bet money that it would have happened in the javascript community. It's still relatively new to package management, and it's far more interested in open source than in free software. It's still feeling its way, and only time will tell how this all ends up. Is it a slippery slope to installing miners in installers? How about arbitrary third-party cpu-as-a-service, like Brilliant Digital did?
How about defaulting to opt-out or not having the option at all?

If this was someone doing it in the AUR, for example, then someone would immediately remove the offensive code and re-release the package with a variant name.

And it is offensive code. It's code that is entirely unrelated to the project. It's not really any different to that Mr Robot "easter egg" that caused all the kerfuffle a while back.