.NET

1439 readers

1 users here now

Getting started

Useful resources

IDEs and code editors

Visual Studio (Windows/Mac)
Rider (Windows/Mac/Linux)
Visual Studio Code (Windows/Mac/Linux)

Tools

Decompilers: ILSpy, dotPeek
Scratchpad: LINQPad
Online playground and IL viewer: SharpLab

Rules

Rule 1: Follow Lemmy rules
Rule 2: Be excellent to each other, no hostility towards users for any reason
Rule 3: No spam of tools/companies/advertisements

Related communities

Wikipedia pages

.NET (open source & cross platform)
.NET Framework (proprietary & Windows-only)

founded 1 year ago

MODERATORS

erlingur@programming.dev

starman@programming.dev

Spyros@programming.dev

196

Moq now ships with a closed-source obfuscated dependency that scrapes your Git email and phones it home (github.com)

submitted 1 year ago by asyncrosaurus@programming.dev to c/dotnet@programming.dev

29 comments fedilink hide all child comments

Also some fun takeaways: it also makes external calls to azure to load configuration and stays silent after updating for 2 weeks before showing warnings.

Moq is unusable. Needs to be forked or repoaced. Time to switch to NSubstitute.

you are viewing a single comment's thread
view the rest of the comments

[–] TheTrueLinuxDev@programming.dev 5 points 1 year ago* (last edited 1 year ago) (1 children)

This is not the first time it happens with Dotnet Open Source packages, there are some pretty funky things going on namely:

Imagesharp (They re-license from Apache 2 to something like Community/Commercial licenses and threw a huge fit over it)

Fody (It expects the software contributors of Fody to be a patron.)

[–] TheCee@programming.dev 4 points 1 year ago (1 children)

It expects the software contributors of Fody to be a patron.

As in, you can only contribute source code if you also pay in money?

[–] TheTrueLinuxDev@programming.dev 5 points 1 year ago* (last edited 1 year ago) (1 children)

See for yourself and you can see this details in the FAQ.

[–] TheCee@programming.dev 1 points 1 year ago (1 children)

Interesting, thanks. Well, that's kind of a good reason, except maybe they should have been more upfront about it.

[–] TheTrueLinuxDev@programming.dev 11 points 1 year ago (1 children)

I think it's asinine to ask the developer who contribute to your project, literally taking the time of the day writing the code and submit PR to your project, to pay money to you.

I wouldn't even bother contributing to the project at that point.

[–] TheCee@programming.dev 5 points 1 year ago

Yes, doing this after the fact is a nice way to blow all trust. There is always this attempted lock-in kind of taste.