yt-dlc VS homebrew-core

(Installation instructions are included in the documentation provided by both forks)

I) https://github.com/blackjack4494/yt-dlc

youtube-dlc is a fork of youtube-dl with the intention of getting features tested by the community merged in the tool faster

We love yt-dlp which is a youtube-dl fork based on the now inactive youtube-dlc. The main focus of the project is adding new features and patches while also keeping up to date with the original project.

ERROR: Channel Restricted; please report this issue on https://github.com/blackjack4494/yt-dlc . Make sure you are using the latest version; type youtube-dlc -U to update. Be sure to call youtube-dlc with the --verbose flag and include its complete output.

$ git init # initialize folder as git repo # add remotes to compare $ git remote add youtube-dl https://github.com/ytdl-org/youtube-dl $ git remote add yt-dlc https://github.com/blackjack4494/yt-dlc $ git remote add yt-dlp https://github.com/yt-dlp/yt-dlp $ git remote update # download info from remotes # show number of different commits $ git log youtube-dl/master..yt-dlc/master --oneline | wc -l # in yt-dlc, not in youtube-dl $ git log yt-dlc/master..youtube-dl/master --oneline | wc -l # in youtube-dl, not in yt-dlc $ git log yt-dlc/master..yt-dlp/master --oneline | wc -l $ git log yt-dlp/master..yt-dlc/master --oneline | wc -l $ git log youtube-dl/master..yt-dlp/master --oneline | wc -l $ git log yt-dlp/master..youtube-dl/master --oneline | wc -l # print list of different commits in a file $ git log youtube-dl/master..yt-dlc/master > orig-dlc.txt # in yt-dlc, not in youtube-dl $ git log yt-dlc/master..youtube-dl/master > dlc-orig.txt # in youtube-dl, not in yt-dlc $ git log yt-dlc/master..yt-dlp/master > dlc-dlp.txt $ git log yt-dlp/master..yt-dlc/master > dlp-dlc.txt $ git log youtube-dl/master..yt-dlp/master > orig-dlp.txt $ git log yt-dlp/master..youtube-dl/master > dlp-orig.txt

yt-dlc

Not who you responded to, but I use youtube-dlc. It's a command-line based utility with a ton of options for downloading YouTube videos.

https://github.com/blackjack4494/yt-dlc/commits/master

The previous update was July 25, and the one before that was December 2020.

While the July update dealt with the updater, having 2 days of small changes since December is not very active.

Is disabling the compromised repo the typical GitHub policy? My concern is there are monorepos used by package managers, like brew, that are a collection of thousands of projects [1]. These monorepos seem like a prime target for attack and if GitHub disables one because a malicious commit was merged then you've taken down an entire ecosystem.

[1] https://github.com/Homebrew/homebrew-core

> Correct. Though we do not appear to be affected, this revert was done out of an abundance of caution.

[1] https://github.com/Homebrew/homebrew-core/pull/167512

> right, but now you know even less about your setup when you some roadblock

This is the same with a binary though. And with homebrew, you can't follow patches or flags used or if they change.

- https://github.com/Homebrew/homebrew-core/blob/c964ad7fa53ad...

definitely be careful about using fortune in a corporate environment or public space if you don't know what dat files you are using or you might just get an extremely unwelcome surprise.

I was practicing a presentation and used to use "fortune" all the time. I forget exactly what it output but I remember being absolutely mortified about what could have happened if that had popped up during an internal company tech talk.

Kudos to brew for keeping unsuspecting people safe

https://github.com/Homebrew/homebrew-core/commit/3fb3c4c3e55...

I'm sorry to be asking this as I find it a bit silly, but it's blocking my PR [3], so could a few of you star the project on Github [1] to get my PR to run?

[1] https://github.com/laktak/chkbit-py

[2] https://brew.sh

[3] https://github.com/Homebrew/homebrew-core/pull/160018