[FFmpeg-devel] [RFC] Experiment: enable github pull requests

[Timo Rothenpieler]

On 13/02/2025 08:24, Soft Works wrote:
> 
> 
>> -----Original Message-----
>> From: ffmpeg-devel <ffmpeg-devel-bounces at ffmpeg.org> On Behalf Of
>> Lynne
>> Sent: Donnerstag, 13. Februar 2025 07:15
>> To: ffmpeg-devel at ffmpeg.org
>> Subject: Re: [FFmpeg-devel] [RFC] Experiment: enable github pull requests
>>
>> On 13/02/2025 03:59, Soft Works wrote:
>>>
>> Finally, with federation, there's are no restriction. If users have an
>> account on another Forgejo instance, such as codeberg, they can clone
>> and submit PRs to FFmpeg without having to register, and without needing
>> to use agit.
> 
> Two more thoughts:
> 
> I'm a bit surprised to hear that Spammers would be such a big problem. On GitHub, I'm subscribed to dozens of repos and surely more than a thousand conversations, but over the past 10 years I have received less than 5 spam messages in total. That makes we wonder how GH is doing it, because notifications are sent out instantly and I would have seen those in the inbox even when they would have been cleaned up later.
> What's their recipe?
> 
> 
> And regarding Codeberg: When spam is such a big concern that we must require user to apply even for creating a fork (unlike almost any other open-source software project in the world) - why then even bother with self-hosting? If we think it causes too much trouble, why do it in the first place? There are other organizations for which hosting Git repos is their daily and primary business. Maybe it's better to have it professionally hosted and call it a day...

The majority of Open Source projects that self-host some form of 
Github-Clone are imposing similar or even harsher restrictions.
See Videolan, who don't even let you register without an admin approving 
you.
ISC and Freedesktop on their Gitlabs have the same restrictions of 
disallowing the creation of repos until admin approval.

Just hosting something that allows free users uploads to anyone who 
signs up is just not something you can do these days.
It WILL get abused, and if you're unlucky, you can end up legally 
responsible for the abuse and/or it can cause the hoster to terminate you.