dusty.ninja

Here's an interesting one around all the "no projects with the LLM taint wanted here" discussion, taking Codeberg as example:

• Codeberg offers to host binary releases

• Current (FOSS) software contains hundreds or thousands of individual works as dependencies in deep dependency trees

• It can be regarded as nearly certain that a substantial amount of those projects will fall under the exclusion or problematic class as per the rules above

• Once complied to a release binary those "tainted" works are often included in the binary and will thus be uploaded to the forge as a release.

• Hence, the forge will be hosting ToS violating material on behalf of the project subjecting the otherwise possibly compliant project to possible sanctions.

Now what do we make of that thought experiment? And how do we resolve it?

#codeberg #llm #sca #foss #compliance #fossdrama #opensource #fossdrama #drama #aiassistedcoding