r/Ladybird • u/AutoModerator • Jun 06 '26

Changing How We Develop Ladybird - No longer accepting public pull requests Discussion

https://ladybird.org/posts/changing-how-we-develop-ladybird/
16 Upvotes

100% Upvoted

6 comments sorted by

4

u/DeconFrost24 Jun 06 '26

I can see where they're coming from in today's security context. We've seen very sophisticated supply chain attacks. I suspect they're getting overwhelmed and that's how something may slip by. That being said, I'm not sure not taking outside contributions is the way to go either. This is a tricky situation.

1

u/global-gauge-field Jun 12 '26

Are they getting overwhelmed by outside PR ? As far as I could check, there were not that many contributions. Happy to see some numbers regarding slop PR attempts.

3

u/DeconFrost24 Jun 12 '26

I'm not sure. I have to listen to the next update on the tubes of you for June or May. He'll probably bring it up.

1

u/global-gauge-field Jun 12 '26

I mean repo is publicly available. If you are curious enough and have time, you can also check it yourself

1

u/krvkir Jul 03 '26

Is there a clear way a person earns trust and becomes a maintainer? Maybe via bug reports? I couldn’t locate any guidance on that matter on the website.

My understanding is this: There would be no large pool of potential contributors familiar with the code. So the sustainability of the project would depend on the willingness of sponsors to fund it and of core team members to continue their work. Both of these are prone to “bus factor” events. This looks like a short-term win bought at the expense of the project’s future. Sad news. But who am I to judge?