And then people complain about "bait and switch " or "pulling the rug" when an OSS project becomes successful and tries to fund itself in some way. "But that should be free" shouts everyone. I'm increasingly coming around to the idea that OSS was the biggest swindle the corporations managed to pull off.
I've been shouting this from the rooftops for ages now. OSS is a trojan horse, something meant to devalue the work of independent developers/small businesses and ensure that the only way the software can be supported is through the patronage of big tech, who earn the money to control such OSS through their unethical monopolistic practices. Look at the languages with funding, and where it comes from. C and C++ (both LLVM and GCC), C#, JS/TS, Java, Rust, Go, Python are all directly funded by big tech. The naive idealism results in everything falling into the hands of ~10 corporations plus some VCs who gamble on which ones will become worth acquiring by big tech, and then we wonder why everything goes to shit and our entire ecosystem is so user-hostile.
And it's not cheap to pay that many people, especially not full time (which is partly why they don't have more full-time contractors). According to https://opencollective.com/phpfoundation#category-BUDGET they only have a balance $350k currently, sinking.
It'd be really awesome, if more companies would sponsor the PHP foundation (especially with thousands or tens of thousands of dollars per year. A lot of small contributions is nice, but not enough.). The work of a few core maintainers is really crucial to the continued development of PHP.
There are countless applications out there still running on PHP, but if the community interest can't raise the required resources to maintain the tool, maybe it's time for it to die, or at least downgrade into maintenance mode so in time it'll become a legacy language.
She says the full-time member is herself, and looking at her Linkedin (in/elizabethn) she isn't exactly the person who would patch PHP for the two CVEs.
Come on Facebook/Zuckerberg, set them up with a structured fund that is invested in s&p500 or something equivalent/better and allows them to pay a handful of devs and a person to admin them (all surplus can be earmarked to go to charity to avoid the sinkhole of bureaucracy from a larger org). Would set the PHP Foundation up for life and the whole world would be better off as a result, smallish directed investment with huge payout from a value perspective.
Beating the dead horse, as you are: the Bun Rust migration cost millions of dollars in tokens and took an additional 3.5 months of labor after the widely-marketed "11-day rewrite" before being shipped as a release, and in the process introduced hundreds of new issues.
migrating to what? just take a look at the newest CVEs, https://www.tenable.com/cve/newest , and you will see that no technology is spared by high or critical reports.
And then people complain about "bait and switch " or "pulling the rug" when an OSS project becomes successful and tries to fund itself in some way. "But that should be free" shouts everyone. I'm increasingly coming around to the idea that OSS was the biggest swindle the corporations managed to pull off.
I've been shouting this from the rooftops for ages now. OSS is a trojan horse, something meant to devalue the work of independent developers/small businesses and ensure that the only way the software can be supported is through the patronage of big tech, who earn the money to control such OSS through their unethical monopolistic practices. Look at the languages with funding, and where it comes from. C and C++ (both LLVM and GCC), C#, JS/TS, Java, Rust, Go, Python are all directly funded by big tech. The naive idealism results in everything falling into the hands of ~10 corporations plus some VCs who gamble on which ones will become worth acquiring by big tech, and then we wonder why everything goes to shit and our entire ecosystem is so user-hostile.
The actual work expenses of the PHP foundation can be viewed here:
https://opencollective.com/phpfoundation/transactions?search... and https://opencollective.com/php-foundation-eur/transactions?s...
(seems like "work" selects most of that)
And it's not cheap to pay that many people, especially not full time (which is partly why they don't have more full-time contractors). According to https://opencollective.com/phpfoundation#category-BUDGET they only have a balance $350k currently, sinking.
It'd be really awesome, if more companies would sponsor the PHP foundation (especially with thousands or tens of thousands of dollars per year. A lot of small contributions is nice, but not enough.). The work of a few core maintainers is really crucial to the continued development of PHP.
There are countless applications out there still running on PHP, but if the community interest can't raise the required resources to maintain the tool, maybe it's time for it to die, or at least downgrade into maintenance mode so in time it'll become a legacy language.
She says the full-time member is herself, and looking at her Linkedin (in/elizabethn) she isn't exactly the person who would patch PHP for the two CVEs.
Not surprising at all. There are no incentives for anyone to contribute. And why would there be in this financial system?
Just hold a public yes/no vote on changing licensing to something paid, and charge $10 to vote no.
I imagine that would go down well and result in zero forks...
Awesome dude let the scabs work for free lol
Come on Facebook/Zuckerberg, set them up with a structured fund that is invested in s&p500 or something equivalent/better and allows them to pay a handful of devs and a person to admin them (all surplus can be earmarked to go to charity to avoid the sinkhole of bureaucracy from a larger org). Would set the PHP Foundation up for life and the whole world would be better off as a result, smallish directed investment with huge payout from a value perspective.
The solution is obvious: pour trillions of dollars into Anthropic and OpenAI, and security will trickle down.
xkcd 2347 again, what a surprise. Oh, wait, there's at least one paid person, that should be something /s
Presumably it makes sense to sunset PHP especially with how cheap code migrations are nowadays.
Beating the dead horse, as you are: the Bun Rust migration cost millions of dollars in tokens and took an additional 3.5 months of labor after the widely-marketed "11-day rewrite" before being shipped as a release, and in the process introduced hundreds of new issues.
What's easier, maintaining PHP or migrating/breaking every single PHP-based site?
And who's to say whatever sites are migrated to won't be "sunsetted" in a few decades too?
Seems like a no-brainer to maintain it.
migrating to what? just take a look at the newest CVEs, https://www.tenable.com/cve/newest , and you will see that no technology is spared by high or critical reports.
Sounds like you’ve been snorting too much iron oxide.
How cheap are code migrations nowadays? Vibe-migrations, you mean?