this post was submitted on 25 Sep 2025
127 points (100.0% liked)
Opensource
5710 readers
323 users here now
A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!
⠀
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Okay, I'm a decision maker overseeing some of those CICD pipelines belonging to a small corp (thankfully not the AI scrapers tho).
I don't make financial decisions, so I can't support FOSS from the corp coffers directly.
Other than caching (that we already do for security purposes), how can I limit our footprint in this?
Assess and cache your package pulls. Make sure you're not pulling unchanging data on each build. Cache partial builds, or proxy dependency-pulled packages.
https://www.sonatype.com/blog/free-isnt-free-the-hidden-costs-of-tooling-decisions-in-open-source-infrastructure#%3A%7E%3Atext=We+Can+Do+Better