homebrew-core VS yt-dlc

$ brew info eza ==> eza: stable 0.18.13 (bottled) Modern, maintained replacement for ls https://github.com/eza-community/eza Not installed From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/e/eza.rb License: MIT ==> Dependencies Build: pandoc ✘, pkg-config ✔, rust ✘ Required: libgit2 ✘ ==> Analytics install: 12,792 (30 days), 38,295 (90 days), 68,375 (365 days) install-on-request: 12,790 (30 days), 38,293 (90 days), 68,375 (365 days) build-error: 0 (30 days)

Is disabling the compromised repo the typical GitHub policy? My concern is there are monorepos used by package managers, like brew, that are a collection of thousands of projects [1]. These monorepos seem like a prime target for attack and if GitHub disables one because a malicious commit was merged then you've taken down an entire ecosystem.

[1] https://github.com/Homebrew/homebrew-core

> Correct. Though we do not appear to be affected, this revert was done out of an abundance of caution.

[1] https://github.com/Homebrew/homebrew-core/pull/167512

> right, but now you know even less about your setup when you some roadblock

This is the same with a binary though. And with homebrew, you can't follow patches or flags used or if they change.

- https://github.com/Homebrew/homebrew-core/blob/c964ad7fa53ad...

definitely be careful about using fortune in a corporate environment or public space if you don't know what dat files you are using or you might just get an extremely unwelcome surprise.

I was practicing a presentation and used to use "fortune" all the time. I forget exactly what it output but I remember being absolutely mortified about what could have happened if that had popped up during an internal company tech talk.

Kudos to brew for keeping unsuspecting people safe

https://github.com/Homebrew/homebrew-core/commit/3fb3c4c3e55...

I'm sorry to be asking this as I find it a bit silly, but it's blocking my PR [3], so could a few of you star the project on Github [1] to get my PR to run?

[1] https://github.com/laktak/chkbit-py

[2] https://brew.sh

[3] https://github.com/Homebrew/homebrew-core/pull/160018

(Installation instructions are included in the documentation provided by both forks)

I) https://github.com/blackjack4494/yt-dlc

youtube-dlc is a fork of youtube-dl with the intention of getting features tested by the community merged in the tool faster

We love yt-dlp which is a youtube-dl fork based on the now inactive youtube-dlc. The main focus of the project is adding new features and patches while also keeping up to date with the original project.

ERROR: Channel Restricted; please report this issue on https://github.com/blackjack4494/yt-dlc . Make sure you are using the latest version; type youtube-dlc -U to update. Be sure to call youtube-dlc with the --verbose flag and include its complete output.

$ git init # initialize folder as git repo # add remotes to compare $ git remote add youtube-dl https://github.com/ytdl-org/youtube-dl $ git remote add yt-dlc https://github.com/blackjack4494/yt-dlc $ git remote add yt-dlp https://github.com/yt-dlp/yt-dlp $ git remote update # download info from remotes # show number of different commits $ git log youtube-dl/master..yt-dlc/master --oneline | wc -l # in yt-dlc, not in youtube-dl $ git log yt-dlc/master..youtube-dl/master --oneline | wc -l # in youtube-dl, not in yt-dlc $ git log yt-dlc/master..yt-dlp/master --oneline | wc -l $ git log yt-dlp/master..yt-dlc/master --oneline | wc -l $ git log youtube-dl/master..yt-dlp/master --oneline | wc -l $ git log yt-dlp/master..youtube-dl/master --oneline | wc -l # print list of different commits in a file $ git log youtube-dl/master..yt-dlc/master > orig-dlc.txt # in yt-dlc, not in youtube-dl $ git log yt-dlc/master..youtube-dl/master > dlc-orig.txt # in youtube-dl, not in yt-dlc $ git log yt-dlc/master..yt-dlp/master > dlc-dlp.txt $ git log yt-dlp/master..yt-dlc/master > dlp-dlc.txt $ git log youtube-dl/master..yt-dlp/master > orig-dlp.txt $ git log yt-dlp/master..youtube-dl/master > dlp-orig.txt

yt-dlc

Not who you responded to, but I use youtube-dlc. It's a command-line based utility with a ton of options for downloading YouTube videos.

https://github.com/blackjack4494/yt-dlc/commits/master

The previous update was July 25, and the one before that was December 2020.

While the July update dealt with the updater, having 2 days of small changes since December is not very active.