Re:Helm is a personal server that lives where you do
by prepend on Monday August 30, 2021 @11:38AM
(#28356733)
> Much more importantly, you run the risk of a classic 'whoops I pushed an API key' blunder if your code gets auto-mirrored to a public repo.
Thousands of competent projects and millions of incompetent projects figured it out. This is not a reason to distribute source code digitally. Any use of this reasoning just makes the user seem stupid and unable to reduce the risk on this trivial problem.
You still need to set up mirroring to keep it up-to-date, and janitor tags so that it matches whatever the customer actually received.
Much more importantly, you run the risk of a classic 'whoops I pushed an API key' blunder if your code gets auto-mirrored to a public repo.
Writing "if you're a human and you want the source code we'll give it to you" costs them about thirty seconds, satisfies the FSF, and carries zero risks.