Vouch

“put something like vouch proxy or oauth2-proxy in front of the endpoint”

“I personally use this tool very frequently before making any commit to github”

“the program will crash with an an ImportError before that block can ever run”

“Else, it will be hard to handle the velocity of PRs”

“It was pretty well received when mitchellh copied the idea and formalized it into vouch.”

“At the end of the day, it's all about trust.”

“Vouch does a good job of creating a system of admission, but there's still the effort of reviewing and/or prioritizing which PRs receive attention.”

“This just requires one more prompt for your prose/code generator”

“Part of me wonders if this system wouldn't work better in reverse, a blocklist instead of a banlist.”

“I also like the flexibility of a system like this.”

“I think its crazy that a single person thinks so much of themselves to create this under their name”

“this is essentially a whitelist of all contributors, which is the same as a collaborators feature in github”

“we're formalizing a system that makes OSS even more of an insider's club”

“I don't understand the added value of a bunch of software around what is essentially an allowlist”

“I also don't like that this model inentivizes a few big PR's over small, lean, readable ones.”

“throwing unnecessary barriers in front of casual but potentially/actually useful contributors”

“Adding this layer of vouching will basically cull all of that very cheap and meaningless vouches.”

“Vouch is a social answer to a traffic-filtering problem.”

“This is an excellent step in the direction of a web-of-trust that the present moment demands”

“The idea is sound, and we definitely need something to address the surge in low-effort PRs”

“I really like this… I've been trying to come up with a similar system”

“it doesn't really solve the problem, introduces other issues / is gameable”

“shouldn't it avoid dogfooding its own most extreme policy of rejecting PRs out of hand”

“Could work! I've long thought effective reputational models are a major missing piece of internet infrastructure”

“I would rather stop contributing to open source rather than interact with your gatekeeping social experiment.”

“That is how I regard this function: as a (crowdsourced / WoT) spam filter or firewall.”

“I like it and am curious to see where this stands in 5 years.”

“it would become a circular system where newcomer would not be able to get vouched”

“I firmly believe humanity (including me) will benefit from this system.”

“This seems to be overly biased toward centralized services, which means it's just serving to further re-enforce Microsoft's dominance.”

“Its just a layer to minimize noise.”

“it's also going to kill the open web. nobody is going to want to share their ideas or code publicly anymore.”

“Vouch is a good quick fix, but it has some properties that can lead to collapsed states”

“But I like the idea and principle. OSS need this and it's traded very lightly.”

“It also addresses the issue in tolerating unchecked or seemingly plausible slop PRs from outside contributors from ever getting merged in easily.”

“Concept is good, but I would omit the concept of denouncement entirely.”

“I can easily see denouncelists turn into a weapon against wrongthinkers.”

“this feels like it just boils down to: only allow contributions from a list of trusted people”

“It's very easy to game, vouch 1 entity that will invite lots of bad actors”

“Once you have orgs trusting the vouch lists of other orgs, you end up with the classic problems of decentralised trust”