this post was submitted on 31 Dec 2024
455 points (99.3% liked)

Open Source

37174 readers
47 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
 

This doesn't surprise me at all... Just like bots in games. Selling a service that benefits another. Its shady, but definitely believable.

Also, what if this is an actual viable way to "market" for an open source project?

https://www.bleepingcomputer.com/news/security/over-31-million-fake-stars-on-github-projects-used-to-boost-rankings

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 127 points 5 months ago (1 children)

Also cybersecurity implications here. Nefarious actors can prop up their evildoings with fake stars and pose as legitimate projects.

[–] [email protected] 27 points 5 months ago (1 children)

my first thought. I usually rely on stars for "trustworthiness" of random projects before running their code.

load more comments (1 replies)
[–] [email protected] 70 points 5 months ago (2 children)

I almost commented something like "thats extremely overpriced, why dont you set up a raspberry pi to do it for you for free" and then i realized the people who could do that dont need fake stars.

[–] [email protected] 27 points 5 months ago (6 children)

How would the raspberry help? It is accounts needed.

load more comments (6 replies)
load more comments (1 replies)
[–] [email protected] 43 points 5 months ago (3 children)

What is Twidium's deal? They are the most expensive and take the longest.

[–] [email protected] 41 points 5 months ago (2 children)

Obviously their stars are the bestest

[–] [email protected] 22 points 5 months ago

Got to make it look organic and viral.

[–] [email protected] 6 points 4 months ago (1 children)

I think you're joking, but if their accounts dont get banned immediately and the stars removed a week after you pay, then their stars are actually the bestest

[–] [email protected] 5 points 4 months ago* (last edited 4 months ago)

There's a chance their stars take so long because they might be using click farms to manually generate them which would be harder for spam detection to catch compared to generating stars with bots and hacked accounts, since technically there are actually x many people actually giving you stars, they're just being paid to do so.

[–] [email protected] 31 points 5 months ago

Its not good that some of these are instant. I guess they try to make it look organic.

[–] [email protected] 8 points 5 months ago

Bespoke artisanal stars!

[–] [email protected] 28 points 5 months ago

Can we get a nice chart for Upvotes on Reddit costs? Asking for a friend. /s

[–] [email protected] 26 points 4 months ago (1 children)

I am not a programmer. But I have been using github as an end user for years, downloading programs I like and whatnot. Today I realized there are stars on github. Literally never even noticed.

[–] [email protected] 17 points 4 months ago (11 children)

The stars are more important when you're a developer. It indicates interest in the project, and when it's a library you might want to use that translates into how well maintained it might be and what level of official and unofficial support you might get from it.

Other key things to look at are how often are they doing releases and committing changes, how long bugs are left open, if pull requests sit there forever without being merged in etc.

[–] [email protected] 4 points 4 months ago (2 children)

And if the developers were to give up on the project, how likely it would be for someone to fork it and continue.

load more comments (2 replies)
load more comments (10 replies)
[–] [email protected] 17 points 4 months ago

You can buy any metric on the web. Amazon reviews, YouTube subscribers and likes, X followers, Reddit karma, …. I am not surprised that GitHub stars are one of them.

[–] [email protected] 12 points 5 months ago (6 children)

Why would it be? Software is good based on it's use and recommendations from real folk, not *s. Many project not on github

[–] [email protected] 49 points 5 months ago (2 children)

But stars equal discoverabiliy, or at least contribute a good chunk to it.

[–] [email protected] 9 points 5 months ago

Sure if you browse by github but in my use of the site over the years I go to the repo from the webpage of the project or from another source such as a link from a blog or something.

[–] [email protected] 6 points 5 months ago

I never went with a software project from random scrolling. It has no value to me if it doesn't meet a need I have right now.

No contributor is going to be good that doesn't use it.

[–] [email protected] 3 points 5 months ago

Well for me personally if I am seeking an application to solve a problem and there are 2 comparable options which are on github, I will first try the one with more stars. Especially if there is a large discrepancy.

When I compare a github vs a non-github project I take into consideration that the other code forge has fewer users, and also I generally prefer devs who take the initiative to get off github. So I will usually give them a go unless the project is too incomplete/stale/inactive.

[–] [email protected] 3 points 5 months ago (3 children)

Yeah, I'd argue that the project can be good and not widely used. Do you think that there are projects with real use case and are great open source software and not widely used because its buried under the *s?

It could be a relatively inexpensive way for niche marketing. Especially if the developer has a payment option with the software. Probably a decent way to get the software out in the open for profitability, no?

[–] [email protected] 4 points 5 months ago

From a pragmatic standpoint, yeah it would accomplish that goal. However, that discounts the intended purpose of the stars, which is to represent an individuals attribution of personal value and trust. They lose significance and become misleading if you can buy them, which holds true even for good software. When we see a github star is should represent someone who has used the software, finds value in it or who respects and trusts the project.

[–] [email protected] 4 points 5 months ago

That is more down to poor marketing. Here on Lemmy or reddit there are big open source communities where you can extol the values of it.

[–] [email protected] 3 points 5 months ago* (last edited 5 months ago)

Just trying to play a little devils advocate. Not saying that its ethical to do it, but if morals/ethics don't play a part in the decision, it could prove useful. Besides, I'd imagine that its already being extorted pretty heavily if there's that much competition for sellers, hah.

load more comments (3 replies)
[–] [email protected] 9 points 5 months ago

Shocking, a site full of diy programmers and hackers are trying to hack the system. Maybe even just for fun.

[–] [email protected] 9 points 4 months ago (4 children)

Programming never needed these sorts of social media features in the first place. Do you part by getting your projects off of Microsoft’s social media platform used to try to sell you Copilot AI & take a cut of your donations to projects with Sponsors.

[–] [email protected] 3 points 4 months ago (3 children)

For reference, there is codeberg.org, operated by a German nonprofit and based on the open source Forgejo, among other open alternatives.

load more comments (3 replies)
load more comments (3 replies)
[–] [email protected] 9 points 4 months ago

Also, what if this is an actual viable way to “market” for an open-source project?

I am fortunate enough to not market my stuff:

If somebody finds and can make use of it. Great.

In the other case who cares? Didn't hurt or cost me anything to publish it.

Fake GitHub stares have other implications: Typosquatting is a real issue and fake stars make it more convincing that it is the genuine project.

[–] [email protected] 8 points 5 months ago* (last edited 5 months ago) (3 children)

For anyone interested in reading more on this type of thing, the colloquial term seems to be "SMM panel" where SMM is "social media marketing". EN Wikipedia has nothing of course, but DE has this: https://de.wikipedia.org/wiki/SMM-Panel.

[–] [email protected] 4 points 4 months ago

Link doesn't work for me on mobile.

Why would the En version "obviously" have nothing?

[–] [email protected] 3 points 4 months ago

Why do you say it's obvious that the English wiki "has nothing"?

load more comments (1 replies)
[–] [email protected] 6 points 4 months ago (1 children)

how is twidium managing to charge so much more?

[–] [email protected] 10 points 4 months ago

Their stars are hand crafted from raw virginal pixels by blind monks using only their toes.

[–] [email protected] 4 points 4 months ago (2 children)

Why a real person would star a project? When I star a project then my GitHub home is littered with activity from that project. I hate that, so I never star anything

[–] [email protected] 4 points 4 months ago

you can turn off notifications from starred projects

[–] [email protected] 3 points 4 months ago

open collective has a minimum star limit to signup.

But they accepted our project even though we didn't meet it. I always thought it was silly, and was glad they were flexible.

load more comments
view more: next ›