this post was submitted on 25 Sep 2025
127 points (100.0% liked)

Opensource

5710 readers
323 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

CreditsIcon base by Lorc under CC BY 3.0 with modifications to add a gradient



founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] HK65@sopuli.xyz 6 points 5 months ago (4 children)

Okay, I'm a decision maker overseeing some of those CICD pipelines belonging to a small corp (thankfully not the AI scrapers tho).

I don't make financial decisions, so I can't support FOSS from the corp coffers directly.

Other than caching (that we already do for security purposes), how can I limit our footprint in this?

[–] Kissaki@programming.dev 1 points 5 months ago* (last edited 5 months ago)

Assess and cache your package pulls. Make sure you're not pulling unchanging data on each build. Cache partial builds, or proxy dependency-pulled packages.

https://www.sonatype.com/blog/free-isnt-free-the-hidden-costs-of-tooling-decisions-in-open-source-infrastructure#%3A%7E%3Atext=We+Can+Do+Better

load more comments (3 replies)