step in and help review a few PRs
help the project triage/reproduce bugs
if code in the PR looks complicated or is hard to understand, ask for an explanation
express your gratitude to the maintainers
make your company sponsor projects they depend on

https://mastodon.social/@bagder/112194895793007918

Daniel is the creator of cURL : https://daniel.haxx.se/blog/2021/03/30/howto-backdoor-curl/

top 8 comments

sorted by: hot top controversial new old

[–] twei@discuss.tchncs.de 8 points 7 months ago (1 children)

is "step in and help review a few PRs" really that helpful? like... oh great, now this one person that i don't trust is telling me that the other person that i don't trust made some code that i should merge

[–] solarvector@lemmy.ml 2 points 7 months ago (1 children)

How does one become trusted? If they regularly review and provide feedback that you agree with it can really speed up the process, even if you're still double checking.

[–] lambda@programming.dev 1 points 7 months ago

Exactly. At first it means nothing. Over time they can begin to trust you.

[–] abeorch@lemmy.ml 6 points 7 months ago (1 children)

I'd love to help out on Open Source projects but have often just not really known where to start. I guess the challenge is to become a experienced enough user of a specific project first.

[–] lemmyreader@lemmy.ml 5 points 7 months ago (1 children)

That one is maybe the easiest to do :

express your gratitude to the maintainers

Besides that there is the possibility to donate. And since the xz backdoor incident I would say it makes sense to keep an eye on end users trying to bully or overload developers. If I remember well I read that the developer of uMatrix stopped with that project because of annoying users filing bug reports with unfriendly and demanding discourse, which can be exhausting for a sole developer.

[–] abeorch@lemmy.ml 3 points 7 months ago

Yeah agree this is the easiest.. I would like to help carry the load somehow. Perhaps filtering /dealing with comments could be a start.

[–] TedJ70@aussie.zone 5 points 7 months ago (1 children)

If the project has a community forum or chat, be active and help answer questions. That takes a lot of pressure off the dev team. I did that for 4-5 years on the Handbrake project before family commitments ate up my free time.

[–] lemmyreader@lemmy.ml 1 points 7 months ago

Cool. Good suggestion.