this post was submitted on 30 Apr 2026
121 points (100.0% liked)

Ask Lemmy

39376 readers
3383 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, toxicity and dog-whistling are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS
 

Have you ever found a GitHub project or anything that seemed nice and tempting to install until you dug a bit deeper?

What are some red flags that should detur anyone from installing and running something?

you are viewing a single comment's thread
view the rest of the comments
[–] GreenKnight23@lemmy.world 1 points 2 days ago (1 children)

it's not the impact to the user having dozens of choices.

it's the impact to the developer to having to maintain the packages for dozens of package repo admins that have each their own special requirements for packages that have to be followed. it's a huge pita that most companies don't even bother with and just run their own package repo.

IMO the user isn't blameless when using an install script. anyone who just blindly runs arbitrary code without reading it is a fool asking to be attacked.

[–] aesthelete@lemmy.world 2 points 1 day ago (1 children)

Exactly, it's a shift in responsibilities from the developers of a thing to the users of that thing.

As a grunt at work and a mid-tier "money haver" at best, I'm tired of having everything shift its costs onto me and it's a red flag that prevents me from installing and running a software package.

Everything around nowadays does this shift if they can get away with it.

I have to set limits on what I tolerate to achieve what gain or the world will leave me dead with a giant tire mark across my chest.

[–] GreenKnight23@lemmy.world 1 points 1 day ago (1 children)

as a foss dev, your problems aren't my problems.

[–] aesthelete@lemmy.world 1 points 1 day ago* (last edited 1 day ago) (1 children)

As a sporadic foss contributor and foss advocate, I ain't even installing your shit if the only install option is curl pipe to shell.

And I also do think it's a red flag exactly like the original poster was looking for.

[–] GreenKnight23@lemmy.world 1 points 1 day ago (1 children)

if you're dumb enough to pipe curl to bash you deserve everything you get.

rtfs

[–] aesthelete@lemmy.world 1 points 1 day ago* (last edited 1 day ago)

I hate Windows partially because you have to download a bunch of random executables. Making that same security hole into a one liner in bash and making that the only install supported is not an improvement in any way.