Software crafter and digital punker keen on open source, iOS and Android apps. Interested in software ecodesign, privacy and accessibility too. pylapersonne.info
Did you have a look on Cake Wallet app? Open source under MIT license and available on F-Droid.
It is always the same issues in fact. You should consider your threat model before all. Then, consider the Signal app, then your iPhone supposed to be updated, trusted, with ADP enabled, biometric lock with erasure after 10 failures, etc. Then consider your ISP, then your country. Etc, etc. You should also compare the contexts. Is an iPhone “better” than a low or middle ranges Android-powered smartphones? For sure, yes. Is it better than high-range expansive smartphones with Android ? Or Pixel ones? Not that sure. And compared to GrapheneOS or /e/? Pretty sure not that much. You can also compare messaging solutions. Is Signal better than WhatApp? Of course yes. But what about XMPP and Matrix for example?
And what are your use cases? Remember your threat model. If you are an activist, a journalist or a whistleblower your needs may be different than a “commons citizen worried about its privacy.
In few words, the only pain point I see is the fact than iOS is proprietary and runs non libre source code and Apple devices than APN. But Android devices are not so much different. It does not mean the solution is not private or efficient, if we succeed in defining a definition of “private or efficient”.
In a nutshell, it could be considered as good. But not perfect.
Any ideas for E2E encrypted storage alternatives?
Not sure of that, maybe we need some case law or update on existing copyleft licenses. Source code generated with GenAI tool, even if their model have been trained with corpora of copyleft sources, are not (yet) considered as derivative works. What a pitty.
Could be interesting. Non-free and current GenAI tools violate copyright, we may consider some evolutions of copyfarleft licenses to forbid such use of source code in these types of tools.
And nice comment spotted there: https://fosstodon.org/@geraldew/113849843708286036
Just wanted to share for the common knowledge and the debate as I already saw here some “post open source” and content about rubbish licenses like SSPL or BSL 😉
Be sure also the issues you have in your project have the suitable labels to help future contributors to pick easily some of them, i.e. labels like “help wanted” or “good first issue”.
You can also refer to best practices listed and explained for example in Advent of Open Source so as to have a nice and user-friendly repo: https://adventofopensource.com/
Have a look on Organic Maps (https://organicmaps.app) or OSMAnd for example (https://osmand.net/).
Wow, you mean that Flock 😅
BTW I hope any project won’t increase the Z version only by including Dependabot commits, it would be insane. Release must be documented, tested, with CHANGELOG updated. If some maintainers just accept Dependabot commits without checking, move away. That’s just simple crappy auto-merge.
The project here is not under an open source license as defined by the 10 criteria of the Open Source Initiative. There is the only acceptable definition of what is open source today, and you can refer to it by clicking on this hyperlink: https://opensource.org/osd
The publication will be deleted as out of topic.
Please explain and answer the concerns as voiced by the community ; without more detail man can think your are a troll, a bot, or someone generated this answer using GentAI tools.
Your answer is not accurate as it does not bring useful details to the community which have legitimate concerns.
In addition the mentioned GitHub repository in a first sight does not contain mandatory files like CONTRIBUTING or SECURITY which does not help user be confident and have less concerns. Moreover, as the reproducibility of builds is not easy to prove event for FLOSS projects, you cannot rely on that point about open source approach. It does not seem that you are using either Dependabot, Renovate or Snyk to ensure the security of the software.
You should really bring details and make the community less worried and more confident instead of bringing that type of answers.
Next ones of that type might be removed ; the community is not dedicated to open source washing.
I agree but the solution used for the blog hosting does not expose anything to have a nice rendering of the commands. In addition, using the time to write the command helps to understand and remember. But I agree it could be upsetting.
Quite strange, I have my last publications posted here downvoted without any comment, and I don’t know why. This is kind of unfair because FMPOV it is just hyperlinks maybe interesting or useful, at least for me and other people I know. But it’s the life, it’s social networks, it’s people and I don’t care that much ✌️ Please, leave comments instead ✌️
Quite strange, I have my last publications posted here downvoted without any comment, and I don’t know why. This is kind of unfair because FMPOV it is just hyperlinks maybe interesting or useful, at least for me and other people I know. But it’s the life, it’s social networks, it’s people and I don’t care that much ✌️ Please, leave comments instead ✌️
FYI, spotted the issue and updated it ;) https://github.com/mlemgroup/mlem/issues/1311
Ok, you are ight, fixed the publication and will dig deeper with my Lemmy app to check if an improvement can be done :) Thanks!
I do not know if the solutions I listed below are open source ; however as an open source contributor I am used to work with some tools depending to choice of the projects:
About credits, I don’t think these tools exposes in some automated way the contributors identities. However, nothing prevents you to use these web UI tools to find who contributed and list people for example in your CONTRIBUTORS files. Another way could be to edit the automated commits these tools submit to your Git repos by adding credits to the translators (with for example Co-authored-by field).