El 21/06/24 a las 10:44, MSavoritias escribió:
On Fri, 21 Jun 2024 11:46:56 +0200 Andreas Enge <andr...@enge.fr> wrote:Am Fri, Jun 21, 2024 at 11:14:18AM +0300 schrieb MSavoritias:Aside from that even Guix uploading all code from the packages to SWH that basically feeds it to a LLM model is indeed not honoring consent of the author of the package.Guix does not upload code to SWH. It gives them a pointer to a public git repository that SWH then harvests or not according to their rules (see my reply to Dale yesterday). These are not the same things at all.This is bikeshedding and arguing on schemantics. Guix gives them a url to download the source code from, so ultimately we (the Guix project) is responsible for the code showing up in there. Lets not argue over schemantics like this. It is even posted on their website in case you want to argue otherwise https://www.softwareheritage.org/2019/04/18/software-heritage-and-gnu-guix-join-forces-to-enable-long-term-reproducibility/
I think the differentiation between sending code and sending a URL is necessary. Saying that Guix sends your code or your source files to SWH leads people to think that Guix *will* transmit those files from your local machine over the Internet to SWH machines when you run "guix lint YOUR_PRIVATE_PACKAGE". And that's not the case, is it?
OpenPGP_0x0AB0D067012F08C3.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature