TLDR: Forking is a hostile move, let us keep it as a last resort and start by communicating first.
Since it’s open source, could someone fork off a drop-in replacement that compiles from source?
Someone could, but it is much more complicate than that.
You will need to convince every crate that uses serde (or at least every crate in your dependencies) to switch to your fork.
And serde is extremely popular in the Rust community, you would be quite busy.
You will need to reach out to every author of a crate depending on serde.
Some of them will not be aware of this problem.
Some will not understand why this is a problem.
Some will agree with the current implementation.
Some will refuse to switch in order to avoid splitting the community.
And the split is going to happen anyway, because many will not switch due to these points.
Then you will have to maintain such fork, which might or might not be a particularly time-consuming job for a particular project, but it is a job nonetheless.
Also, just straight forking a project is a quite hostile move.
The proper way to handle this is to contact the maintainer, ask why this change was made, and start a discussion arguing the drawbacks and asking to revert it.
It is also worth mentioning that the maintainer of serde is very active in the Rust community, and they maintain a lot of other popular crates.
Just to name a few: anyhow, async-trait, semver, syn, thiserror.
They are definitely an important member of the community, and a very experienced one.
They are not immune from mistakes, of course, but I think we would be much better off by talking to them than just assuming bad faith and hijacking their project.
Diplomacy goes a long way, and I would be very surprised to find out that they are completely unreasonable with respect to this issue (from my limited interaction with them, they seem a rather decent person).
Meanwhile, we can pin a version of serde that does not have this issue.
There is no need to rush.
The right to fork the project is granted to anyone by the creater of the project (who by the way is not the current maintainer).
Calling a fork “project hijacking” means the person granting the right by license was acting dishonesty to begin with, wich makes me question who is acting in bad faith. Being able to modify and redistribute open source code are elemental freedoms the FOSS community thrives on. These freedoms do not mandate any reason and they certainly don’t legitimise anyones judgement.
That’s a great answer - thanks. I agree that communication is the first thing to try. Realistically a fork would just result in multiple versions of the same thing kicking around, including the binary that worries people.
Edit: Seems like diplomacy worked. The developer is removing the precompiled binary:
Well said. I imagine that maintaining a project as ubiquitous as serde is not an easy job, and I’m sure dtolnay is no stranger to holding his ground when people disagree with him. I’m therefore not that surprised to see him holding his ground on this issue, and I think people should still continue the discussion with him instead of immediately forking.
I personally think that proposing a PR to allow opting out of this (as is being hashed out here: https://github.com/serde-rs/serde/pull/2580) is a much better solution than forking. In my experience in open source dev, writing a PR often produces much better results than just complaining in an issue.
TLDR: Forking is a hostile move, let us keep it as a last resort and start by communicating first.
Someone could, but it is much more complicate than that.
You will need to convince every crate that uses
serde(or at least every crate in your dependencies) to switch to your fork. Andserdeis extremely popular in the Rust community, you would be quite busy.You will need to reach out to every author of a crate depending on
serde. Some of them will not be aware of this problem. Some will not understand why this is a problem. Some will agree with the current implementation. Some will refuse to switch in order to avoid splitting the community.And the split is going to happen anyway, because many will not switch due to these points.
Then you will have to maintain such fork, which might or might not be a particularly time-consuming job for a particular project, but it is a job nonetheless.
Also, just straight forking a project is a quite hostile move. The proper way to handle this is to contact the maintainer, ask why this change was made, and start a discussion arguing the drawbacks and asking to revert it.
It is also worth mentioning that the maintainer of
serdeis very active in the Rust community, and they maintain a lot of other popular crates. Just to name a few:anyhow,async-trait,semver,syn,thiserror. They are definitely an important member of the community, and a very experienced one. They are not immune from mistakes, of course, but I think we would be much better off by talking to them than just assuming bad faith and hijacking their project.Diplomacy goes a long way, and I would be very surprised to find out that they are completely unreasonable with respect to this issue (from my limited interaction with them, they seem a rather decent person).
Meanwhile, we can pin a version of
serdethat does not have this issue. There is no need to rush.The right to fork the project is granted to anyone by the creater of the project (who by the way is not the current maintainer).
Calling a fork “project hijacking” means the person granting the right by license was acting dishonesty to begin with, wich makes me question who is acting in bad faith. Being able to modify and redistribute open source code are elemental freedoms the FOSS community thrives on. These freedoms do not mandate any reason and they certainly don’t legitimise anyones judgement.
That’s a great answer - thanks. I agree that communication is the first thing to try. Realistically a fork would just result in multiple versions of the same thing kicking around, including the binary that worries people.
Edit: Seems like diplomacy worked. The developer is removing the precompiled binary:
https://github.com/serde-rs/serde/releases/tag/v1.0.184
Well said. I imagine that maintaining a project as ubiquitous as
serdeis not an easy job, and I’m sure dtolnay is no stranger to holding his ground when people disagree with him. I’m therefore not that surprised to see him holding his ground on this issue, and I think people should still continue the discussion with him instead of immediately forking.I personally think that proposing a PR to allow opting out of this (as is being hashed out here: https://github.com/serde-rs/serde/pull/2580) is a much better solution than forking. In my experience in open source dev, writing a PR often produces much better results than just complaining in an issue.