Git Myself Because GitHub Cannot Be Trusted.

By Darren Nathanael on Thu, Mar 14, 2024

Prologue

On a serious note: sfconservancy.org/GiveUpGitHub/Stop Using GitHub!

Chapter one

“In the beginning was the Word—”, I love GitHub. Let’s just put it out there, GitHub is a great platform, it is. Simple, easy to use, spys-on-you-with-a-billion-tracker, very stable. It’s perfect.

But sometimes, their system has false positive that leads to frustration, such as randomly banning your account for no reason at all.

This account has been suspended.

Granted, it took around 18 hours of total resolution time before they acknowledged the mistake and unbanned the account. Those hours were absolutely the worst, knowing that everything you had on GitHub was gone—lost, potentially never seeing the light of day again!

Chapter two

So after that incident, there were only two options realistically, and I took the latter.

I spun up a VM, and self-hosted Forgejo. Now what is Forgejo you might ask? “Forgejo is a self-hosted lightweight software forge. Easy to install and low maintenance, it just does the job.” Think of it as a free and open-source alternative to GitHub – anyone can run it on their own infra, and it’s free as in free beer! fabulous!

Now, if you don’t want the hassle of setting up Forgejo yourself, you can use their hosted instance at Codeberg https://codeberg.org/ or even my instance at https://git.dpaste.org/.

千里之行始於足下
The journey of a thousand miles begins with a single step.
老子 (Lao Tsu) in Chapter 64 of 道德经 (Tao Te Ching)

Ending

So, what is the main takeaway? Well, I can sleep soundly knowing that everything I’ve done is safely backed up and mirrored on my Forgejo instances.

Epilogue

Why Give Up GitHub?

There are so many reasons to give up on GitHub, but we list here a few of the most important ones:

  • Copilot is a for-profit product — developed and marketed by Microsoft and their GitHub subsidiary — that uses Artificial Intelligence (AI) techniques to automatically generate code interactively for developers. The AI model was trained (according to GitHub’s own statements) exclusively with projects that were hosted on GitHub, including many licensed under copyleft licenses. Most of those projects are not in the “public domain”, they are licensed under FOSS licenses. These licenses have requirements including proper author attribution and, in the case of copyleft licenses, they sometimes require that works based on and/or that incorporate the software be licensed under the same copyleft license as the prior work. Microsoft and GitHub have been ignoring these license requirements for more than a year. Their only defense of these actions was a tweet by their former CEO, in which he falsely claims that unsettled law on this topic is actually settled. In addition to the legal issues, the ethical implications of GitHub’s choice to use copylefted code in the service of creating proprietary software are grave.

  • In 2020, the community discovered that GitHub has a for-profit software services contract with the USA Immigration and Customs Enforcement (ICE). Activists, including some GitHub employees, have been calling on GitHub for two years to cancel that contract. GitHub’s primary reply has been that their parent company, Microsoft, has sold Microsoft Word for years to ICE without any public complaints. They claim that this somehow justifies even more business with an agency whose policies are problematic. Regardless of your views on ICE and its behavior, GitHub’s ongoing dismissive and disingenuous responses to the activists who raised this important issue show that GitHub puts its profits above concerns from the community.

  • While GitHub pretends to be pro-FOSS (like SourceForge before them), their entire hosting site is, itself, proprietary and/or trade-secret software. We appreciate that GitHub allows some of its employees to sometimes contribute FOSS to upstream projects, but our community has been burned so many times before by companies that claim to support FOSS, while actively convincing the community to rely on their proprietary software. We won’t let GitHub burn us in this same way!

  • GitHub differs from most of its peers in the FOSS project hosting industry, as GitHub does not even offer any self-hosting FOSS option. Their entire codebase is secret. For example, while we have our complaints about GitLab’s business model of parallel “Community” and “Enterprise” editions, at least GitLab’s Community Edition provides basic functionality for self-hosting and is 100% FOSS. Meanwhile, there are non-profit FOSS hosting sites such as CodeBerg, who develop their platform publicly as FOSS.

  • GitHub has long sought to discredit copyleft generally. Their various CEOs have often spoken loudly and negatively about copyleft, including their founder (and former CEO) devoting his OSCON keynote on attacking copyleft and the GPL. This trickled down from the top. We’ve personally observed various GitHub employees over the years arguing in many venues to convince projects to avoid copyleft; we’ve even seen a GitHub employee do this in a GitHub bug ticket directly.

  • GitHub is wholly owned by Microsoft, a company whose executives have historically repeatedly attacked copyleft licensing.

How Do I Give Up GitHub?

The reason that it’s difficult to leave GitHub is a side-effect of one of the reasons to leave them: proprietary vendor lock-in. We are aware that GitHub, as the “Facebook of software development”, has succeeded in creating the most enticing walled garden ever made for FOSS developers. Just like leaving Facebook is painful because you’re unsure how you’ll find and talk with your friends and family otherwise — leaving GitHub is difficult because it’s how you find and collaborate with co-developers. GitHub may even be how you find and showcase your work to prospective employers. We also know that some Computer Science programs even require students to use GitHub.

Accordingly, we call first on the most comfortably-situated developers among you — leaders of key FOSS projects, hiring and engineering managers, and developers who are secure in their employment — to take the first step to reject GitHub’s proprietary services. We recognize that for new developers in the field, you’ll receive pressure from potential employers (even those that will otherwise employ you to develop FOSS) to participate on GitHub. Collective action requires the privileged developers among us to lead by example; that’s why we’re not merely asking you leave GitHub, but we’re spearheading an effort to help everyone give up GitHub over the long term. You can help protect newcomers from the intrinsic power imbalance created by GitHub by setting the agenda for your FOSS project and hosting your project elsewhere.

As such, we’re speaking first to the hiring managers, community leaders, and those in other positions of power that encourage the use of GitHub to new contributors and existing communities. Once someone in power makes the choice to host a project on GitHub, the individual contributors have little choice but to use these proprietary and damaging products. If you are making decisions or have political power within your community and/or employer, we urge you to use your power to center community efforts through FOSS platforms rather than GitHub. If you’re an individual contributor who feels powerless to leave GitHub, read our (growing) list of recommendations below on how to take the first steps.

Long term, we’ll develop this stable URL (that can always be reached by GiveUpGitHub.org) to include links to resources to help everyone — from the most privileged developer to newcomers and members of underrepresented groups in FOSS — to give up on GitHub. If you don’t feel that you or your project can yet leave GitHub, we ask that you raise awareness by adding this section to your README.md to share your concerns about GitHub with your users. If you’re ready to leave GitHub, you can use this README.md template to replace your current one.


Content mirrored from https://sfconservancy.org/GiveUpGitHub/

Acknowledgement

Forgejo & Codeberg

https://forgejo.org/ & https://codeberg.org/

🖤 Forgejo team for making Forgejo awesome!
🖤 Codeberg for keeping Forgejo alive and well!

Software Freedom Conservancy

https://sfconservancy.org/