Show HN: Shouldiuse.dev – software dependency health checker

Re:Show HN: Shouldiuse.dev – software dependency health checker by SCUSKU on Friday June 27, 2025 @05:21PM (#44400348)

Tried a public repo but it asked for a personal access token? No thanks. Otherwise great idea, but why should I give a personal access token for something that's publicly available, it really does not inspire confidence.

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by pmig on Friday June 27, 2025 @05:40PM (#44400497)

Thanks scusku, the personal access token does not have any additional permission, we just need to avoid getting rate limited.

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by Sleaker on Friday June 27, 2025 @06:04PM (#44400676)

Sharing a GitHub API token to bypass rate limiting is explicitly in violation of section H of the terms on GitHub usage.

https://docs.github.com/en/site-policy/github-terms/github-t...

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by pmig on Friday June 27, 2025 @06:12PM (#44400755)

Most applications are designed in that way, think about ossf scorecard, star-history.com etc..

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by kissgyorgy on Friday June 27, 2025 @05:58PM (#44400630)

Why don't use your own personal access token?

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by pmig on Friday June 27, 2025 @06:10PM (#44400733)

We did, bur ran into the API limits as oder/scorecard alone is quite expensive on GitHub request

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by rglover on Friday June 27, 2025 @06:26PM (#44400839)

Implement an OAuth flow with Github and then you can avoid that entirely.

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by pmig on Friday June 27, 2025 @06:29PM (#44400861)

Gods point, will work on that!

[ Parent | on HN ]

Re:Show HN: Shouldiuse.dev – software dependency health checker by dylan604 on Friday June 27, 2025 @06:03PM (#44400671)

never pay for something yourself when you can have someone else pay for it. it's a useful concept that can be used in many many cases. the 1%ers love this concept

[ Parent | on HN ]