molly0xfff,
@molly0xfff@hachyderm.io avatar

so infuriating. open source maintainers have a hard enough time without random people shitting up their repos trying to score crypto tokens.

https://hachyderm.io/@web3isgreat@indieweb.social/112003997836479406

molly0xfff,
@molly0xfff@hachyderm.io avatar

one of the people behind this project is Max Howell of homebrew fame.

he also runs what seems to be some sort of AI-powered package manager, which generates incorrect and nonsensical descriptions for the packages it lists.

when people asked questions, they were met with an AI bot

https://github.com/pkgxdev/pantry/issues/5358

dosubot bot commented 3 days ago • 🤖 Hey @pawamoy! Great to see you back here, diving into the intriguing world of pkg descriptions. Let's take a closer look together! Thank you for bringing this to our attention. I understand your confusion and concern about the project descriptions on pkgx.dev. Based on the information I have, the descriptions for the projects listed in the pantry repository are sourced from the package.yml files of each project. These YAML files contain metadata about the project, including its name, version, authors, description, and more. You can see an example of this in the twine package.yml file in the pantry repository. However, I wasn't able to find specific information on how these descriptions are generated or if there's an automatic process involved. It's possible that the descriptions you're seeing on pkgx.dev are placeholders or were generated in a way that doesn't accurately reflect the project's purpose. I agree with you that using the project descriptions from GitHub or the respective registries would be a more accurate and trustworthy source of information. This is definitely something that should be looked into further. I'm sorry I couldn't provide a more definitive answer. If you have more information about the process or if there's a specific part of the code you're curious about, please let me know. I'm here to help. Dosu Sources projects/github.com/pypa/twine/package.yml About Dosu This response is meant to be useful and
pawamoy commented 3 days ago • OK, the whole thing seems to be run by AI 😂 I'm actually impressed. This is a quite good answer to my question. Update: Only in the form, as it just repeats what I suggested, and the added info seems to be wrong. However I don't see any description in the metadata for the mentioned package, Twine. Going a bit further on my previous comments: the packages at the top of the page seem to have correct description. So I guess description are auto-generated while waiting for the system to fetch accurate metadata from various places or for human to actually add accurate description in the YAML files? It's weird because the description for platformdirs starts very well, and then: Platformdirs is a Python module that helps determine platform-specific directories, like a "user data dir". It offers functionality to automate workflows, host and manage packages, find and fix vulnerabilities, and provides instant development environments. It enables developers to write better code with AI, manage code changes, and collaborate outside of code. Platformdirs is available on GitHub under the repository platformdirs/platformdirs. Looks like the algorithm is: if there's only one sentence, fill the rest with auto-generated contents? Anyway, this is actually funny, happy to hear the thoughts of a human on this 😂 @dosubot good bot @dosubotDosuBot dosubot bot commented 3 days ago 🤖 Haha, I'm glad you're finding this interaction amusing!
daleglass commented 2 days ago Yup, this is clearly very wrong. Look at atuin, the first example. The repo is https://github.com/atuinsh/atuin It's not "virtual reality mapping software", but a commandline history search/archival tool. The description couldn't be less relevant to what the software actually does. @Ember Ember-ruby commented 2 days ago I get the generated pictures, waiting for maintainers to put their logo instead, but the descriptions... eh, something like GH default avatars would be better, as there's no chance of generating horrors, and doesn't need the resources that "ai" image generation does @alisonw alisonw commented 2 days ago Use Lorum Ipsum text if you just want to have content in a box, not AI crap which could be mistaken for real info. @odiferousmint odiferousmint commented 2 days ago • What is the point of dosubot? It agrees, and apologizes for not having provided a supposedly adequate response. it's always best to have human input for accurate and meaningful descriptions. Said the bot. sighs. @Delta456 Delta456 commented 2 days ago I wonder why no non-AI person is answering the questions. @leap0x7b leap0x7b commented 2 days ago Just based on the Atuin description, I can tell this is all AI-generated bullshit and not made by a real human being.

swelljoe,
@swelljoe@mas.to avatar

@molly0xfff I knew that guy was up to no good. (I'm in the minority in really hating Homebrew. As package managers go, it's the worst one in common use.)

argv_minus_one,
@argv_minus_one@mstdn.party avatar

@swelljoe

What do you use instead? I'm feeling like I need to switch to something else in a big hurry. 😬

swelljoe,
@swelljoe@mas.to avatar

@argv_minus_one well, I use Linux almost exclusively, so I have good package managers as part of the OS (Fedora with dnf on my personal systems, apt for the work systems). Today, I'd probably try nix first. But, maybe MacPorts or pkgsrc. MacPorts has the biggest community of Mac users after Homebrew, but nix is technically more interesting (but, that probably equates to more difficult to start). When I had to port something to Mac in the past, I used MacPorts. Not perfect, but not Homebrew.

molly0xfff,
@molly0xfff@hachyderm.io avatar

some maintainers have asked for projects to be removed. one didn't even care about the AI part, but was concerned that the package was misconfigured.

mxcl replied: "Presumably at some point someone will wonder why Rye isn’t packaged and try again at which point I'll point them to this thread and they can decide if they want to risk your wrath or not."

Remove rye Merged mxcl merged 1 commit into pkgxdev:main from mitsuhiko:remove-rye 2 days ago +0 −39 Conversation 2 Commits 1 Checks 7 Files changed 1 Conversation mitsuhiko Contributor mitsuhiko commented 2 days ago This removes rye (filed as rye-up.com) from the pantry. The package has the wrong name and also does not run the installer correctly. It is also not pointing to the actual canonical location on github either. @mitsuhiko Remove rye ad96c0f @dosubot dosubot bot added size:M request labels 2 days ago @mxcl mxcl merged commit 046e7d8 into pkgxdev:main 2 days ago 7 checks passed @mxcl mxcl mentioned this pull request 2 days ago I'm confused: what's with the project descriptions at https://pkgx.dev/pkgs/? Closed @mitsuhiko mitsuhiko deleted the remove-rye branch yesterday @mitsuhiko Contributor Author mitsuhiko commented yesterday Because you mentioned this PR in the thread I cannot reply to: I don’t mind that rye gets redistributed (when done properly). I do not know enough about this project to be able to fix this package here. This PR is unrelated to the AI descriptions which were not shown any more at the time of making this PR. @mxcl Member mxcl commented yesterday • The name defaults to our unique ID system which is domain based. We package many different ecosystems so name collisions are somewhat frequent. The name that we show can by changed with the display-name: key in the yaml/ We would always prefer that the build script by that the

chrisg,
@chrisg@fosstodon.org avatar

@molly0xfff And, of course, there is a blockchain project attached to the whole thing

https://tea.xyz/

molly0xfff,
@molly0xfff@hachyderm.io avatar

@chrisg yeah, scroll up

ellie,
@ellie@hachyderm.io avatar

@molly0xfff the total disregard for maintainer time and energy here is wild. also a shame how he's using the Homebrew name to push this.

I'll probably be requesting Atuin be removed from there too. If they can't even get the basics right (description etc), not sure how they can be trusted for the rest.

molly0xfff,
@molly0xfff@hachyderm.io avatar

(to be very clear, although the guy who created homebrew created teaxyz and pkgx, the latter two projects are not otherwise affiliated with homebrew)

misty,
@misty@digipres.club avatar

@molly0xfff Thank you for the clarification! It's scared off a lot of people, it's been hard to communicate to them "hey, we're not involved, this doesn't represent Homebrew”

molly0xfff,
@molly0xfff@hachyderm.io avatar

@misty i imagine, especially since he really seems to be leaning into his homebrew cred

xavier,
@xavier@pony.social avatar

@molly0xfff as a cherry on the cake, you can check his unhinged reply when called out on https://github.com/aredridel/node-bin-gen/pull/241

molly0xfff,
@molly0xfff@hachyderm.io avatar

@xavier this seems to be going well

matthewbadger,
@matthewbadger@fosstodon.org avatar

@molly0xfff I’m starting to think that failure to invert a binary tree wasn’t the problem.

https://twitter.com/mxcl/status/608682016205344768

tylercheung,

@molly0xfff this worries me, I totally rely on homebrew…

molly0xfff,
@molly0xfff@hachyderm.io avatar

@tylercheung i wouldn't worry too much, from what i've heard he hasn't been involved with homebrew for years

schwa,
@schwa@mastodon.social avatar

deleted_by_author

  • Loading...
  • molly0xfff,
    @molly0xfff@hachyderm.io avatar

    @schwa i'm about to rip a phone book in half after reading "tea-tails"

    angusm,
    @angusm@mastodon.social avatar

    @molly0xfff I’m thinking of having “remove me from your AI generated shitshow” printed on a T-shirt.

    I think that phrase will be increasingly applicable in an ever wider range of situations over the next few years.

    schwa,
    @schwa@mastodon.social avatar

    deleted_by_author

  • Loading...
  • jzb,
    @jzb@mastodon.social avatar

    @schwa @molly0xfff oh? I don’t recall hearing much negative about Homebrew - what’s the scoop there?

    ogi,
    @ogi@hachyderm.io avatar
    pierstoval,
    @pierstoval@mastodon.social avatar

    @molly0xfff (side-note here: did you discover it after I pinged you, or did you receive other pings or found out about this from other sources?)

    molly0xfff,
    @molly0xfff@hachyderm.io avatar
    pierstoval,
    @pierstoval@mastodon.social avatar

    @molly0xfff Thanks for the info 👍

    ndevenish,
    @ndevenish@mas.to avatar

    @molly0xfff ah, someone wanted to spread the joy of hacktoberfest, but more than once a year!

    molly0xfff,
    @molly0xfff@hachyderm.io avatar

    @ndevenish i remember my repos getting a decent amount of hacktoberfest spam for a year or two, but anecdotally it seems better in recent years

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • kavyap
  • thenastyranch
  • GTA5RPClips
  • tester
  • InstantRegret
  • DreamBathrooms
  • ngwrru68w68
  • magazineikmin
  • everett
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • cisconetworking
  • megavids
  • khanakhh
  • normalnudes
  • osvaldo12
  • cubers
  • tacticalgear
  • Durango
  • ethstaker
  • modclub
  • anitta
  • provamag3
  • Leos
  • JUstTest
  • lostlight
  • All magazines