cross-posted from: https://lemmy.ml/post/30846707

cross-posted from: https://lemmy.ml/post/30846701

The question is simple. I wanted to get a general consensus on if people actually audit the code that they use from FOSS or open source software or apps.

Do you blindly trust the FOSS community? I am trying to get a rough idea here. Sometimes audit the code? Only on mission critical apps? Not at all?

Let’s hear it!

  • sugar_in_your_tea@sh.itjust.worksEnglish
    9·
    1 month ago

    I don’t do a full audit, but I certainly make sure the project is reasonably active before using it. I’ll look at:

    • recent commits
    • variety of contributors
    • activity on issues and pull requests from maintainers

    That only takes a few min and I think catches the most important issues.