Hacker News new | ask | show | jobs
by angry_octet 323 days ago
No deps is great, but what I'm looking for is no bugs, authentication and encryption. I want features turned off by default, configs tight as a drum.
5 comments

This section of the readme really sets the expectation clearly:

> inverse linux philosophy -- do all the things, and do an okay job > - quick drop-in service to get a lot of features in a pinch > - some of the alternatives might be a better fit for you

This includes a link to this doco in the repo which is an incredible source of info: https://github.com/9001/copyparty/blob/hovudstraum/docs/vers...

If you're looking for security and stability, I would personally avoid this.

I took a glance at the code and it's... not great. It's absolutely full of short, meaningless 1-2 letter variable and function names that make it very hard to read and understand if you're not the original author. Wouldn't be surprised if it's full of security holes that will never be found.

According to the author it was mostly written on the train with his phone, that could explain the terse naming.
This is a developer flex if I ever heard one
From the README FAQ section:

> i want to learn python and/or programming and am considering looking at the copyparty source code in that occasion

> do not

FWIW, it just had an XSS vulnerability fixed yesterday: https://github.com/9001/copyparty/security/advisories/GHSA-9...
> No deps is great, but what I'm looking for is no bugs

I don’t think I’ve ever used a piece of software in my life that had no bugs. At least with no deps (vs say a nodejs project with 500 of them) then the bugs will only be in one place, the main software so ideally they can be fixed quickly.

Obviously, that is not this
This is just good software