• 2 Posts
  • 61 Comments
Joined 25 days ago
cake
Cake day: September 27th, 2026

help-circle


  • It sounds like you’re in a gatekeeper role

    Not sure I like the sound of that.

    But I was thinking of scrutinizing a few more packages in this way, time permitting. Maybe it will inspire other people to do the same.

    It also means the security is “trust me bro”. That’s far more disturbing to me than all the legal and transparency concerns put together.

    Well that’s why I’m asking for transparency. This oldest 3rd party appstore ran on “trust me bro” for almost 20 years… way back when it was big but the whole mobile ecosystem stuff wasn’t that developed yet. Then it was small for a long time, now it’s growing again because a) a new device came out that is selling surprisingly well and b) vibecoding is here.

    And it was never big on opensource despite being Linux-based.

    Now, when I raise these issues, many of these people feel insulted. Or admit that it’s just one bad apple. Not realizing that that’s exactly why we need transparency. It’s the opposite of “I don’t mind Google knowing everything, I have nothing to hide”: “you demanding transparency means you suspect us all of being criminals”.

    It’s idiotic at best, and worthy of a Hamlet quote at worst: “The lady doth protest too much, methinks”







  • Thanks.

    I have analysed the package to my best abilities - it contains lots of stuff that cannot possibly be 100% the authors creation, but they lie about using LLMs and anyhow AI stealing IP is not illegal (yet).

    The community is pretty much 50/50 about LLM usage, but I think more people care about transparency, Opensource and respecting licenses. I’m getting plenty of likes for raising this issue. Well, relatively. More than the people opposing me.

    I have also found that the software in question wants to install ~40 more packages from its creators personal website. This isn’t disclosed anywhere. And that is objectively shady af imo - but again, probably not actually illegal.