• @irotsoma@lemmy.world
    link
    fedilink
    English
    1211 months ago

    Yeah, it would be nice if it was easier for devs to just turn over the project to an “official” fork. Unfortunately, I’m sure that would get abused by scammers taking over projects forcefully and adding in malware before anyone notices.

    • @9point6@lemmy.world
      link
      fedilink
      911 months ago

      You’re spot on with the latter, I’ve come across a few projects over the years where the ownership is transferred and it’s then loaded up with malware or even just instantly abandoned again because the new owner just wants it on their GitHub to get a job or something.

      • @Gestrid@lemmy.ca
        link
        fedilink
        English
        10
        edit-2
        11 months ago

        I’ve come across a few projects over the years where the ownership is transferred and it’s then loaded up with malware

        See: The Great Suspender

        The original developer sold the repo to a new, anonymous maintainer. The new maintainer abandoned the repo but continued updating the Chrome Web Store version of the addon. That version eventually got delisted by Google for including malware.