Selfhosted

60210 readers

1041 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

This Looks kinda cool, but does anyone have any experience at vetting a project like this? (github.com)

submitted 5 months ago by fleem@piefed.zeromedia.vip to c/selfhosted@lemmy.world

27 comments fedilink hide all child comments

Ive been looking for something to help the navidrome server do its thing, and this looks awesome, but there is one issue that was just opened and closed yesterday, it looks a little sus?

how does one go about digging through and discovering if this is malicious or not?

you are viewing a single comment's thread
view the rest of the comments

[–] ryokimball@infosec.pub 24 points 5 months ago (2 children)

Looks like on Reddit, the creator is blocking people from reporting things like sending data to foreign servers.

[–] fleem@piefed.zeromedia.vip 23 points 5 months ago* (last edited 5 months ago)

the closed issue speaks of that!

Edit:

also thanks for braving reddit for us!

[–] desentizised@lemmy.zip 13 points 5 months ago* (last edited 5 months ago)

That was the red flag for me personally in terms of giving it a try. At the first accusation they said "the code is there, I have nothing to hide" (which is entirely fair) but then it devolved into (paraphrasing) "I took down issue reporting because people kept abusing it."

So assuming the best case scenario where the code is clean and it's just a misunderstanding you're still looking at a creator who is willing to censor the community they simultaneously seem particularly eager to reach by self-promoting their project. Not my jam.