Am 23.01.26 um 10:21 schrieb Tomoaki AOKI:
Upcoming (hopefully) moving from GitHub to Forgejo managed by
FreeBSD project could change the situation, but it's still
not official. I'm thinking about how my workflow should be
on the switch.
I contributed to Forgejo for a while (tried to improve the HTTPS setup
instructions but was frustrated by a slow/haphazard review process and
gave up), so FWIW my impressions:
It's a project that it constrained by developer time, which has
consequences:
* Not all parts of the code have a maintainer. This is partly due to the
fact that Forgejo is a fork of a fork.
* The CVE track record shows that they do care (and that they do have a
working CVE process), but also that they did have two remotely
exploitable vulnerabilities in the past three years and needed roughly a
month to fix each one.
Sadlys, I don't know an alternative that I can recommend.
I did a quick search and dug up some web sites with promising leads, but
I can't do the heavy lifting and evaluate them, so I'm just listing my
results in case anybody can follow up on these:
https://www.stackhero.io/en-US/#services
Open source managed services, preinstalled, on a VServer.
GitLab would be the code collaboration tool, but they do offer more
services, many of which could serve any open-source project with server
needs.
They do cost money.
https://www.wearedevelopers.com/en/magazine/298/top-github-alternatives
There are too many useless Top Ten Alternatives lists on the web, but
this one is actually useful and has interesting entries.
My take on each:
GitLab is good but requires a big server and administration.
BitBucket - yeah, Atlassian products give you everything you need but
are a pain to use.
OneDev - no idea. Having CI/CD and Kanban sounds useful.
Gog - tried it once, the setup was a bit too painful and I went to
Forgejo. YMMV.
Codeberg - that's Forgejo plus community and issue tracking. Not sure
how much beyond Forgejo there is.
Radicle - peer-to-peer collaboration based on git. That means the
development workflow does not require a hosting provider anymore, which
I find intriguing, but YMMV.
Gitea - Forgejo was forked from there. Prioritizes features over
security or reliability.
Google Cloud, AWS CodeCommit - I guess these are too commercial for
Open-Source collaboration.
Launchpad - no idea. I don't like it because I don't like Canonical, but
YMMV.
Hope this helps somebody.
Regards, and back to lurking,
Jo
