cross-posted from: https://lemmy.zip/post/46522263

you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 1 year ago* (last edited 1 year ago) (5 children)

I hadn't heard of Forgejo, although I realize now that I have seen repositories using it before. I think it's cool that they even have statically linked binaries of it but it's a bit concerning that like an entire web server is built in because what if there's vulnerabilities? I guess if you regularly stayed up to date it's not too bad then.

Edit: Oh, sounds like it's a fork of Gitea which I have heard of before, interesting.

  • source
  • hideshow 5 child comments
  • [–] 9 points 1 year ago

    i mean, the web server in question is the Go standard library. if there is a vuln in there we have bigger problems, considering it's also used by the docker binary.

  • source
  • parent
  • [–] 3 points 1 year ago (3 children)

    Interesting. Wonder why they forked gitea

  • source
  • parent
  • hideshow 3 child comments
  • [–] 9 points 1 year ago (2 children)

    Because the Codeberg folk didn’t like the idea of relying on a product made by a for profit company. https://blog.codeberg.org/codeberg-launches-forgejo.html

  • source
  • parent
  • hideshow 2 child comments