104 karma · joined November 12, 2025
https://github.com/awesome-selfhosted/awesome-selfhosted
https://awesome-selfhosted.net/
Slightly different, but here's an actually useful site:
https://www.trackawesomelist.com/awesome-selfhosted/awesome-...
How does it do either of these two things, exactly?
> and locked down
It doesn't lock anything down, in fact it only serves a purpose if your CI isn't locked down. Your npm token should not be visible to anything except npm. If it is, then you've got far bigger problems.
At best, this only serves as a reactionary warning / damage control in case your CI is compromised, i.e. after you've already been pwned. Which is all well and good, don't get me wrong, but pretending it "protects" you from anything is giving a false sense of security.
git config --global init.defaultBranch masterI know someone IRL who moved to another country to escape their stalker / abusive ex. This would absolutely put their life at risk. Even a country name, combined with other information, can be used to pinpoint someone's identity or precise location.
This move is reckless, inappropriate, and possibly even illegal in the EU. Honestly it should be (and used to be) unthinkable for a platform to do something like this, and it's insane that you believe otherwise. Frankly you should be ashamed of yourself for suggesting it's ok for a tech company to suddenly leak its users' PII.
Not to mention the propaganda posters can just use a VPN, so in trying to stop Russia you've only succeeded in giving up your own privacy and putting innocent people at risk. Well done.
Edit: It's also visible for private accounts.
https://support.google.com/mail/answer/15604322?sjid=1029580...
> When smart features are on, your data may be used to improve these features.
Oh, please. Do you not understand that OP shouldn't have needed to submit a takedown request in the first place? Add the repos' license files (and NOTICE files too, if Apache!) to your site like you're legally required to, or the next time this happens it won't be a HN post; it'll be a lawsuit.
Seriously, you're playing with fire and it's not doing anything to help your brand. People already look at Vercel with disdain, and this is exactly why.
Of course they have. They're a company profiting off of people's work as a means to promote their service. Companies get away with this sort of thing all the time because they know that most of the time, just like in this instance, no one's going to actually enforce their license and sue them.
That said all they really need to do is copy the license text. Kindof strange they didn't bother to do that. They're already automating copying readmes off GitHub; skipping the license file seems like it puts them at unnecessary risk.
Can't believe it's been eight years since WASM was introduced, and it still can't do basic stuff like proper multithreading. We shouldn't need to screw around with web workers and SharedArrayBuffers. Wasn't the whole point of wasm to break free from the shackles of JS so that we can write desktop-grade software that runs in the browser?
Going after the most extreme cases has the effect of ripping out the weeds by the root, rather than plucking leaf after leaf.