Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I saw it today in someone who announced a package and in their README had a gif of a mouse clicking to add a "star" to the repo. Like the youtube videos that ask you to "like and subscribe".


I am surprised that there is no widely-spread Starware license yet. “You are entitled to use this software after starring X/Y on GitHub.”


"If You institute a revocation of a GitHub star against any entity (including cross-repository and cross-user removals) alleging that the Work or a Contribution incorporated within the Work no longer constitutes a GitHub star, then any patent licenses granted to You under this License for that Work shall terminate immediately as of the date such a revocation is performed."


I've seen this on a lot of the hacktoberfest repos this year. The repo owner will only authorize the PR if you star them


And here I had just read the parent comments as sarcastic. Ugh.


At least you can revoke the star after the merge.


A startup for which I had applied to a job opening few months ago reached back to me and asked me to check out one of their repos and star it if I thought their project was good. Never heard back from them about the job though


"Star and watch for more great software"


I'm glad we don't see this in npm post-install hooks... yet


Don't give them ideas.


"This dependency tree is sponsored by NordVPN. Staying safe online is an ever growing difficulty and you could be exploited by hackers. NordVPN allows you to change your IP address, making you harder to track, securing your privacy. Check out the link in the API docs to get 20% off for the first two months. Thanks NordVPN!"


It's not a new idea; npm had its run-in with ads a couple years back[0].

--

[0] - https://www.infoq.com/news/2019/08/npm-bans-package-ads/


`gh api --silent -X PUT user/starred/evil/pleasedont` seems like it'd work for many users who leave magic tokens in their $HOME...

I'm very much not a fan of ambient authorization.


Let me take this opportunity to thank today's sponsor, Whatever dot org. Yadda yadda yadda.


I promise to leave more high-value comments if you can get me a deal with Whatever.


.org is for the 90s.

we live .io era these days (sadly)


.io is already so yesteryear.

There is/was .ai for a bit but its less generic.


That won't work because of CORSs, no?


Begging for those interactions makes 15 seconds of every video telling me to smash that like, subscribe, bell, comment, share, rewatch 10x for good luck.

Should we limit the # of likes/stars one gets per period of time? Scarcity?


Try the SponsorBlock addon


Since it’s always the same comment it is easily compressible and should just be automatically generated and included as part of the pre roll ad. Then it could even be localized for the viewer!


this decade will be a giant sociological study




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: