this post was submitted on 30 Apr 2026
89 points (100.0% liked)

Ask Lemmy

39383 readers
966 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, toxicity and dog-whistling are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS
 

Have you ever found a GitHub project or anything that seemed nice and tempting to install until you dug a bit deeper?

What are some red flags that should detur anyone from installing and running something?

top 50 comments
sorted by: hot top controversial new old
[–] Blaster_M@lemmy.world 8 points 2 days ago (1 children)

"This project has been archived on [10+ years ago]. It is now Read Only."

or

Last commit 5+ years ago

[–] anon_8675309@lemmy.world 5 points 2 days ago (1 children)

Depends. Software can be done.

load more comments (1 replies)
[–] ChaoticNeutralCzech@feddit.org 6 points 2 days ago* (last edited 1 day ago) (1 children)

Requires weird IDE to build

I shifted 8 GB of files to an older machine just to be able to install Android Studio on barely-supported hardware, and now I'm cloning the repo and the .gradle directory alone is 1 GB?

load more comments (1 replies)
[–] the_grass_trainer@lemmy.world 9 points 2 days ago (1 children)

Signing-in before being able to use a FREE software.

-glares at Canva after buying Affinity -

[–] ParadoxSeahorse@lemmy.world 3 points 2 days ago (3 children)

That’s why they bought it

load more comments (3 replies)
[–] mech@feddit.org 37 points 3 days ago (2 children)
[–] osanna@lemmy.vg 10 points 2 days ago

Aaaaaand tab closed.

[–] rekabis@lemmy.ca 3 points 2 days ago (1 children)

I can’t believe that marketing people are this fucking stupid.

Like, full-on knuckle-dragging morons.

They intentionally drive away more paying customers than they could ever “channelize” with this method.

Because most people realize that prices are only ever hidden for malicious, anti-consumer purposes.

[–] yermaw@sh.itjust.works 1 points 1 day ago (1 children)

Thats for every industry. The burger van with the prices in micro-text behind the guy asking what you want and you better hurry up cause theres a queue

[–] rekabis@lemmy.ca 1 points 1 day ago

Your example can be wholly explained by inadequate knowledge of visual design (UI/UX, to be specific), especially from a consumption/access position. That’s a technical outcome which is a result of ignorance or failures, not a sales outcome from an explicit strategy of obfuscation.

To put it another way, people making too-small signs for their yard sale that drivers just cannot see at speed, is not the same as companies going “call for pricing”. That would be the same as signs saying, “call us for the yard sale address”. The former is wholly unintentional and borne out of ignorance, the latter is completely intentional anything but accidental.

[–] rodneylives@lemmy.world 12 points 2 days ago* (last edited 2 days ago)

A rule of thumb I use is how desperate the software is to tell you the weather even when you never asked for it or even set it up to report it.

[–] hushable@lemmy.world 101 points 3 days ago (3 children)

Support only through a Discord server

[–] vogi@piefed.social 10 points 3 days ago (2 children)

Especially in the homebrew/modding world some even only distribute their stuff over discord. Which is an extra level of stupid. Dont think anything else can beat this.

load more comments (2 replies)
load more comments (2 replies)
[–] sem@piefed.blahaj.zone 18 points 3 days ago (1 children)

If the project maintainer has a policy of "no politics allowed."

Rather than a policy more along the lines of "be respectful"

[–] VitoRobles@lemmy.today 4 points 2 days ago

100%.

Then you look through their history and it's them laugh emojiing something like doing a LGBT suicide or some ridiculous shit.

[–] vole@lemmy.world 20 points 3 days ago (1 children)

Venture capital funding. The plan is always to do a rug pull. Though if it properly freely licensed and the code is reasonable enough to be forked, it's less worrying but still risky. It's better to work with honest people.

[–] OpenPassageways@lemmy.zip 7 points 2 days ago (1 children)

This is why I avoid Bluesky

load more comments (1 replies)
[–] Oka@sopuli.xyz 53 points 3 days ago (8 children)

"Ads, In-App Purchases"

That game is gonna be full-on enshitification.

load more comments (8 replies)
[–] gera@feddit.nu 23 points 3 days ago* (last edited 3 days ago) (21 children)
  • curl | sh installation method
  • vomit-colored website, vomit-colored developer avatars, or more obvious: AGENTS.MD in the repo
  • opensource, but compiling yourself is "unsupported"/"not recommended"
  • opensource, but official website aggressively advertising their SAAS which makes it look like the software is actually paid product
[–] ZoteTheMighty@lemmy.zip 1 points 2 days ago

Back in the Python 2.7 days, curl | grep sh was the standard practice for installing the package manager, pip. Even better, the shell script actually had a binary blob somewhere in the middle. It was shell script up top, binary blob in the middle, and back to shell script at the bottom. Until Python 3.5ish, pip wasn't bundled with Python, so this was standard practice.

load more comments (20 replies)
[–] irelephant@lemmy.dbzer0.com 13 points 3 days ago* (last edited 3 days ago) (1 children)

GitHub repo that has "pm me on telegram" instead of code

[–] GreenKnight23@lemmy.world 10 points 3 days ago

join our discord

[–] vogi@piefed.social 12 points 3 days ago (4 children)

Something I ran into just now was AI generated Imagery in Docs or as an Icon.
I am not even that Anti AI as many on here I feel like. But this is a sure fire way to show how much you don't give a shit about your project. Just use emojis or some shit which is ironically even less work but somehow makes it seem more deliberate.

[–] vithigar@lemmy.ca 2 points 2 days ago

Had a conversation with someone recently about exactly this. Usage of AI generated assets gives me exactly the same feelings as a local business using a gmail or personal ISP email account on their advertising.

It doesn't automatically mean it's bad, but it's an indication that whoever is running things just can't be bothered to put in effort.

load more comments (3 replies)
[–] pHr34kY@lemmy.world 23 points 3 days ago* (last edited 3 days ago) (3 children)
  • It's not already in my distro's package manager

  • A github project with 1000 open issues and no commits for 3 years.

[–] flowering_asterism@leminal.space 1 points 13 hours ago

My distro has one of the highest amount of software packaged, yet i regularly find software i like that isn't. There will always be software that isn't packaged yet useful, i reckon.

load more comments (2 replies)
[–] imetators@lemmy.dbzer0.com 19 points 3 days ago (1 children)
  • New post about a promising selfhosted app
  • looks inside
  • em dashes, emojis, release in last 24h with 35 commits since.

I fucking swear, if only vibe coders would ACTUALLY write up their own posts about THEIR OWN SOFTWARE, many would not act harsh towards them as much as it happens.

[–] flowering_asterism@leminal.space 1 points 13 hours ago

What's wrong with em dashes? I use it wherever English syntax requires it.

[–] AstroLightz@lemmy.world 15 points 3 days ago (1 children)

The repo does not actually contain the source code, instead a link to download from a different site.

[–] BlameTheAntifa@lemmy.world 8 points 3 days ago (1 children)

Unless that different site is Codeberg.

load more comments (1 replies)
[–] slazer2au@lemmy.world 29 points 3 days ago

Requires cloud connectivity.

[–] kescusay@lemmy.world 35 points 3 days ago (36 children)

Evidence of vibe-coding. Em dashes and emojis sprinkled throughout the documentation? Code with inline comments pointlessly describing some change, as if you want to know what that block of code used to do more than what it actually does?

It's vibe-coded garbage by someone who doesn't know how to code. Stay far away.

load more comments (36 replies)
load more comments
view more: next ›