Getting the wrong vibes from the dark patterns on this site.
I click on github.. it doesn't open github... had to look in the comments here.
I find repo here... the front end is some ancient angular app with 3 year old security vulnerabilities.
I try to find some kind of demo of the product.. and end up in a sales funnel to pay 500$
As a first impression this does not look like a trustworthy opensomething .org product, even though it's probably fine.
Agreed. In traditional terms, they're using a .org domain as a .com. The old rules aren't enforced, but they still hold some meaning.
It sounds like they want to do a "community edition", so they could just do it from a .com, and set expectations appropriately.
If they instead wanted to have a community-developed open source project, but also sell derived/layered products, they might set up a community governance structure and home it on the .org, at arm's length from their .com where they do sales and other company-specific stuff.
(BTW, sympathy on the challenges of building a sustainable business on open source, especially given some of the poor taste we sometimes see from freeloading commercial competitors.)
Yep, earlier on, the non-country-code ones had rules about who could use them, and the registrar for some of those was expected to be a custodian.
Then they seemed to focus more on making money from registrations, than from the custodian aspect.
Then ICANN created an industry of middleperson (maybe because there shouldn't just be one rent-seeker, but competing ones), and also seemed to bless a market of landgrabbing squatters. (And much more recently, some ICANN-connected people seemed to be scheming to grab a popular TLD for themselves, like a PE firm.)
With most of the good and even bad domain names taken by squatters, there was demand for all sorts of new TLDs (which someone was happy to middleperson).
As well as the risky practice of building your company atop a 2-letter country code TLD, where there's a significant chance of a change in government policy would break a lot of your links, URLs embedded in software, email addresses, and Googlejuice. Or simply have you over a barrel with exorbitant renewal fees (or bribes).
(Historically, some of these ccTLDs were small islands, where there was one sysadmin person running the "ISP" for the island, including domain name authority, and the government didn't necessarily even know/understand.)
> The old rules aren't enforced, but they still hold some meaning.
Only to techies. And I'd say only to those who were techies back in the 90's or earlier.
All the other people very likely have no clue why there are all these different TLDs. And for people outside the USA, UK and AU, .com Just means it's an English (as in language) website.
- Where did you find a broken link to our GitHub account and repositories on openproject.org? Appreciate your help in case our page is not correct.
- What 3 year old security vulnerabilities in our angular code part are you talking about? Would you mind sharing a link?
- OpenProject is fully open source (GPL 3), not half. You can host it yourself. And if you prefer it, you can get hosted by us, which for many organizations is cheaper than doing the hosting themselves.
- Regarding your doubts about our trustworthiness: Have you checked who is using OpenProject? Siemens, the German railway company Deutsche Bahn, the City of Cologne, Audi, Hyandai, MIT, Greenpeace... On GitHub we have 2.2k forks, and 8.5k stars.
I mean, admittedly you have to scroll down to the second half of the (long) page, but the "Code repository on Github" link goes straight to the github project page for me...
Only one of the security issues seems to be unfixed, the others all have patch versions.
I click on github.. it doesn't open github... had to look in the comments here. I find repo here... the front end is some ancient angular app with 3 year old security vulnerabilities.
I try to find some kind of demo of the product.. and end up in a sales funnel to pay 500$
As a first impression this does not look like a trustworthy opensomething .org product, even though it's probably fine.
Just my opinion