The syncthing-android fiasco tells me one simple truth: Github solved none of the issues facing open source software distribution. No one can decide if the new repos are safe, why the original repo disappeared, nor what happened to the original author. The signing keys have apparently been granted to a new maintainer in a new repo, and yet there is zero trust that this ins't a prelude to a new version of syncthing for Android that will be filled ads, tracking, and worse.
Discussion
Loading...
@nuintari I made a proof of concept p2p based GitHub a few years ago in anticipation of the Autonomi p2p storage network.
Since then I made #AutonomiDweb on the live network, which means that web apps and websites remain available regardless of owners disappearing, services being discontinued etc. No domain renewals and no link rot.
This is s step forward that scales without cost, on which we can build a new, open, verifiable, perpetual #p2pgit without benignant (or otherwise) dictators.