Post

the problem is not that it’s free software (free to fork, free to study, free to modify) run by a rag tag group of maintainers - the problem is it’s the literal backbone of all modern digital infrastructure and should be considered “too important to fail”. So yeah, when rsync vibes, it’s concerning.

Andrew Lilley Brinker@alilleybrinker.com

Regarding the rsync thing: the software is provided as-is.

1 repost6 likes

any of the multi-billion dollar companies who benefit from the continued reliability of rsync have the same opportunity to invest actual money into an alternative, open-source or otherwise, that they had before rsync's maintainers got sloppy with it

The societal importance or number of users of an OSS project doesn't change maintainers' responsibilities. The responsibility lies, as it always has, with integrators. OSS is "free as in puppy," and when you take a dependency you take the implicit responsibility to maintain it yourself if needed.

What you’re describing is the tragedy of the commons. I remember working on upstream kubernetes at VMware and leadership was all too willing to pass off burden onto other maintainers or companies because ”free as in puppy” and Google, Red Hat, or some other corp owned that part of the stack

At some point, an important open and free project stops being “just a project” and becomes a public good needing the same care and planning as other widely used/distributed utilities: we’ve yet to expand the open source model to encompass that.

Do not misunderstand me: maintainers and their projects owe no one anything - corporations that have consumed and consumed without giving back have created the tragedy, refuse to bolster engineering efforts, and need to make provide support

as a maintainer I absolutely disagree. that is just one view, and it results in a type of society I don't even particularly want to exist in if you don't want to have that responsibility, don't release software

People can of course be concerned with rsync using AI with insufficient rigor, but at the end of the day it's up to the rsync maintainers to decide what level of rigor they deem appropriate, and they don't owe more than that to their users. If users are unhappy, they can contribute, fork, or leave.