Questions tagged [open-source]
QUESTIONS ABOUT LICENSING ARE OFF-TOPIC. You may ask questions about open source licensing on https://opensource.stackexchange.com. This tag is for asking about designing programs that interact with open source software.
913
questions
1
vote
0
answers
83
views
Is it practical to make an exe without it being flagged as false-positive for malware?
I made a small utility as a PowerShell script. It worked fine, but wasn't very practical when getting other people to run it who weren't familiar with PowerShell. I modified it to add a GUI using ...
- 119
1
vote
1
answer
110
views
Open source projects, SBOMs and security
I was just reading a StackOverflow question here, about extracting the version number from a node package.json file. And the simple
'read in the json and access the property in your build tool'
got ...
- 131
0
votes
1
answer
59
views
Where to keep assets for documentation generation as to not clutter the main repository
I have a large C++ project I'm hoping to release publicly soon (it is currently an internal development at work).
We have a large auto documentation setup which uses doxygen and sphinx, however our ...
- 109
0
votes
0
answers
49
views
Publish a trivial libraries separately or as a collection
As an individual developer, I often find need to write a trivial (let's say, under 100 SLOC + tests + docs + build system config) library that helps me to write code of some other (large) project in a ...
- 191
2
votes
1
answer
291
views
Releasing a project for multiple languages and package managers
My friend is building a small open-source project with a few convenience functions. He'd like to release both JS, PHP and Python versions of the package to npm, packagist and pypi. The main part of ...
- 147
7
votes
3
answers
461
views
How to get code review on hobby project?
In my spare time, I like to develop various small libraries and CLI utilities that solve a real problem I have, but are also likely useful to other people with the same use case. When I say small, I ...
- 97
1
vote
4
answers
335
views
How can Data security be ensured in an open source software?
In open source projects handling user data in a secure manner can be managed, for example through encryption and password protected functionality. What I'd like to create is a way for the user to ...
- 129
-2
votes
3
answers
135
views
Nightly Builds Test against real database
Is it a good practice to hit actual database for Integrations test(Not prod but pre prod DB) for Jenkins Night builds?
The reason I am asking this is because our DAO uses procedures to perform simple ...
-4
votes
2
answers
160
views
Software license for paid open-source app on Microsoft Store [closed]
What is the right software license to use in order to be able to sell my application, have it be open-source, and still be able to accept pull requests?
I am developing a productivity/utility ...
- 103
2
votes
4
answers
505
views
Is it common practice to declare exceptions in a library that won't be thrown or caught anywhere within that library?
I have a very basic library that serves the purpose of collecting some useful but simple pieces of code. Like for example a Percent struct or functions like ToDegrees() and ToRadians(), just to give ...
3
votes
2
answers
158
views
How to assure users that an open source web application actually runs the publicized source?
I'll explain my case as an example, but I think the problem applies to other web projects as well:
I have developed a Telegram bot in Python and made its source public. Then, I have deployed the bot ...
- 53
-2
votes
1
answer
140
views
What counts as disclosing source for software licenses? [closed]
MPL v2, GPL v3 and other licenses alike require giving users access to source code.
For desktop applications - does access have to be provided through the user interface (GUI)? Or can it just be ...
- 99
15
votes
7
answers
7k
views
Where can I find requirements specification for Open Source software? [closed]
I can hardly imagine a software project where the things to do are not somehow collected in a formal/informal document, be it a SRS or a simple note. So I was searching for these requirements ...
- 285
3
votes
1
answer
177
views
How to protect an open-source distributed application consisting of clients and servers from forks made by hackers?
TL;DR: How distributed open-source apps like Scuttlebutt are secured from DoS and hackers who can make custom version of application?
I'm struggle with designing an open-source distributed application ...
5
votes
2
answers
1k
views
How to prove that given binary files are compiled from provided source code?
Let's assume I want to use an open-source software, the developer says that the software is open-source and provides the source code.
Now my question is, how can I be 100% sure that the given binary ...
- 61
-6
votes
1
answer
95
views
What is the best option between buying, building from scratch or implementing an open source ERP? [closed]
I was required to do a medium ERP with the inventory, Bill of Materials, and production modules. However, I do not know how long it would take me.
I am calculating three months for the analysis and ...
-1
votes
1
answer
110
views
How to verify a production website corresponds to a certain github repo commit when a company claims they are the same
A company makes their website client side open source and claim that
it is exactly equal to a certain version that can be found in a github repo.
I want to verify their production website (client side)...
- 113
-3
votes
2
answers
211
views
Will I have to remove an apache 2 open-source project from the internet and stop using it if someone patents the concepts within the code?
The Apache 2 open-source license allows patents, does this mean it could be possible that an apache 2 open-source project would have to be removed if a company demonstrates it has a patent based on or ...
- 415
-4
votes
1
answer
116
views
What to concern when publish code with an API call on GitHub? [closed]
I'm learning the way to use API right now. Since I want to publish the code on GitHub, I have some question about it.
1.
I will use public API, however, there are APIs with authorization and those don'...
- 113
-2
votes
1
answer
100
views
How to start developing a well architected Javascript Library?
I want to start developing an. open-source javascript library. I can see other open-source libraries are well structured. They have src, dist, test kind of folders, etc.
Which is making me very ...
- 11
-1
votes
3
answers
183
views
Open-sourcing applications with API keys
Consider a desktop application that interacts with a web API, for which it needs a key. How should API keys be handled? Configuration files come to mind, however it doesn't seem that simple when terms ...
- 245
1
vote
1
answer
212
views
Implementing semver within a development pipeline when building libraries
This is not about the specification of semver itself (which is crystal clear), but rather about the best approach to implement it within a development pipeline when building libraries.
TL;DR: who/...
- 640
-4
votes
1
answer
132
views
Choosing the correct "opensource" license for codes [closed]
In programming terms, what defines Open Source?
I am building a platform that I want to be open, to be used by other programmers in the context of running their own apps on it at the same time for ...
- 137
-2
votes
1
answer
277
views
Do I include the open source copyright notice in an enterprise software (for commercial use)? [closed]
I have included OpenCV libraries in the enterprise software written in c++. I know that OpenCV is a BSD 3-Clause license, which means most of its libraries are free to use, modified, and redistribute. ...
0
votes
0
answers
44
views
Rewriting and publishing an old library: naming, versioning and backwards compatibility
I have rewritten a package that has been abandoned for a while now. The old package is in active use, but has problems. It is a client of another API, and does not provide all features that the ...
- 357
3
votes
3
answers
627
views
Isn't keeping the master branch intact essential for collaborating?
I've read a lot of useful articles about collaboration with git. Many do's and don'ts, etc. For example, Top ten pull request review mistakes and a nice article about git workflow The Perfect Code ...
- 151
-2
votes
1
answer
961
views
How to make code runnable on open source code editors like Ace Editor?
For my computer science uni project I'm required to build a web application with an integrated code editor. I believe I can just integrate open source editors like Ace Editor.
However, I feel ...
- 11
4
votes
1
answer
83
views
is there a unified term for the open-source and managed services in our HLD?
I'm preparing a session on our product's HLD (High-Level Design) for newbies.
It's a microservices-based system that includes several self-managed open-source projects & other managed services (e....
- 153
45
votes
9
answers
9k
views
How do we avoid CI-driven development...?
I'm working on a very large research-led open-source project, with a bunch of other regular contributors. Because the project is now quite big, a consortium (composed of two full-time employees and ...
- 569
0
votes
1
answer
128
views
Is it okay to use a different JDK from what my team use? [closed]
I am a new hire (as a software engineer) in a company and the Linux (Ubuntu 18.04) machine I got has no java installed. I tried to install Java SE 8 kit from Oracle but apparently there is a new ...
4
votes
1
answer
194
views
What file ownership/permissions should I set for the files/directories before open sourcing a project?
I have multiple projects in different programming languages that I will upload on online code hosting platforms as Open Source projects.
What file permissions and ownerships should I set on the files ...
- 237
0
votes
2
answers
174
views
Can a service provider proof it is running a particular open source product? [closed]
Part of our project includes an open source GO server that we have open sourced for transparency. How can we prove that we havent made any alterations to the code before we deployed it?
- 119
0
votes
1
answer
115
views
Benefits of using BDD in an open source project
The benefits of Behavior Driven Development (BDD) seem to be that non-technical stakeholders are more easily included in the writing of requirements/user stories.
In an open-source project, most ...
- 147
-1
votes
3
answers
408
views
Why those famous open source tools don't make them also a good-designed library? [closed]
There are a lot of famous open source tools, for example: gcc, git, mercurial and etc.
However, they don't provide a nice API for developer.
Someone will say, they are command-line tools instead of ...
- 131
0
votes
2
answers
235
views
Can I build a fully open source app with .Net Core [closed]
I am thinking about starting an open source project and right now I am deciding what technology stack to use.
At the moment, my main coding experience is using C# and I am wondering if I can build a ...
- 21
-2
votes
1
answer
64
views
Is there a package format for packing source code files, that provide end-users an easy and straight-forward option to compile (& install) the program
For example in addition "Open" action, "Compile & Install" be another available action when user click on package
- 3
0
votes
1
answer
525
views
Branching strategy when utilizing open source application
I'm looking for advice on what a good branching strategy looks like when using mostly open source code. Most of my dev experience is with writing and working with custom made code and only using open ...
- 11
13
votes
1
answer
1k
views
I accidentally overhauled someone's entire project. Any acceptable way to pull request?
I found a great project on github with a useful central feature but which is rough in the "polishing" of error handling, logging, config, and setup. The project is 5 years untouched, and only a couple ...
- 249
-1
votes
1
answer
468
views
How to use Semantic Versioning on Existing Multi Component Codebase?
I am working on a multi contributor project, having ~2500 Commits. It has multiple components, i.e. Frontend, Backend and Data Processor/DB Ingestion.
Now that we are expecting more contributors, a ...
0
votes
2
answers
211
views
How can I figure out where the code starts for a complex software project? [duplicate]
Say I want to (try to) read through and understand a fairly complex piece of code (for example the free software Coreboot firmware code, which can be found here). How can I figure out where the code ...
- 163
-2
votes
1
answer
59
views
Interested in contributing to ChromiumOS: What steps should I take to prepare? [closed]
I'm a hobbyist developer of 16 years and would like to start contributing to the ChromiumOS project. I have extensive experience in developing for mobile and embedded devices, so my skill set is ...
- 117
-3
votes
1
answer
239
views
How to revive an abandoned LGPL project? [closed]
There is an LGPL open source code in SourceForge that is quite useful, but entirely abandoned. I can see that the community struggles with code issues, but the original developer does not respond to ...
- 113
10
votes
3
answers
748
views
Should I ask to be mentioned in the credits in an open source project?
I have read several post about how to give credit in open source projects, but none that target my question.
I have been working on an open source project for about a year now, and one of my latest ...
- 111
3
votes
3
answers
430
views
How to ensure a user isn't using a hacked client
Background: We have the code for a 20 year old MMOG that some people still play, and we have the rights to opensource it. Currently, the server isn't terribly authoritative, i.e. the client is the one ...
- 135
4
votes
1
answer
160
views
How do open source libraries like Apache Commons fit into the microservices architecture?
I'm reading about microservices, and one point I come across repeatedly, is, in order to achieve full indepencency, it's a bad idea to share libraries among microservices. Examples are here and here.
...
- 153
1
vote
1
answer
276
views
Usage data collection on open-source library
I have an open-source library that provides multiple services around a particular domain. I would like to know how the various components are being used so that I can prioritize updates and new ...
- 259
5
votes
1
answer
912
views
For GPL, do trained neural network models count as source code?
GPL requires all source code be made available, but I am unsure how trained neural network models interact with GPL since it's unclear if these models count as source code.
To have a concrete example ...
- 167
0
votes
1
answer
98
views
Can I modify author when get patch from community?
We use GIT to maintain an open source code(GPLV2) for our Application. Sometimes we need to introduce patch from community when find bugs.
I wonder to know:
Can we modify the author when commit ...
- 17
13
votes
2
answers
558
views
If I am late to commit a software license to a repo, are all previous commits unbound from the license?
Suppose I have a private project with 100 commits. I don't add a software license until the 101st commit. If I make the project open source, does that mean all first 100 commits are unbound by the ...
- 241
2
votes
3
answers
619
views
Store password in open source project
I have a fairly simple problem currently but I cannot get a solution, maybe someone here has a good idea.
I am working on an open source CMS for artists called Jinya CMS. The whole project originated ...
- 614