Ive been looking for something to help the navidrome server do its thing, and this looks awesome, but there is one issue that was just opened and closed yesterday, it looks a little sus?

how does one go about digging through and discovering if this is malicious or not?

  • fleem@piefed.zeromedia.vipOP
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 months ago

    the reason i pumped the brakes, was an issue filed yesterday by a brand new user and closed by the owner. asking why it was sending a bunch of network requests somewhere random. then it was edited for content and the name of the issue was changed by the owner and closed.

    my spidey sense pricked up? but I’m just an old stoned n00b so i wanted to hear what the old stoned wizards thought

      • fleem@piefed.zeromedia.vipOP
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 months ago

        Welp, that issue has “officially” been deleted, as well as a followup issue asked by another person asking about that first issue feeling fishy.

        • hoppolito@mander.xyz
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 months ago

          While a full ‘deletion’ of such an issue is certainly unfortunate, I can kind of see how it gets to such a decision point.

          You’re creating some software in the open, decide to ping some communities on reddit/lemmy and all of a sudden it seems like a disgruntled brigade is breaking down your door while you just wanted to show them the garden.

          What for us looks like earnest sleuthing can feel like abuse/harassment from the other side simply due to the asymmetrical nature of the internet.

          Would have probably still preferred a closed issue instead, but having a couple ‘niche-successful’ repos on github myself - I can at least certainly empathise.