Attackers would use it to gain access to inject malware if the project was at all popular. The Internet is a dark forest.
This only works as a skill filter. It doesn’t work in an environment with malicious actors.
This only works as a skill filter. It doesn’t work in an environment with malicious actors.
> The Pull Request Hack probably isn't suitable if you're running big projects.
> And it is almost certainly a stupid idea if you write code which is actively used by multiple downstream projects.
> And if your stuff has even the slightest chance of compromising security then you're better off sticking to trusted members.
This sort of openness is an elegant weapon from a more civilized age.
These days the net is like a zombie movie where if you leave a crack in the boards covering the windows the arms will reach in.
Doesn’t seem worth it to me.
Dead projects and projects that are so young they are more likely to be abandoned than finished.
It doesn't work for projects that already have enough vetted members.