Yes, projects backed by multi-billion dollar companies do tend to be more resistant to that kind of attack.

It wasn’t “easy” at all, they had to put in over 2 years of useful contributions before there was chance to insert the malware. If you’re worried just stay on an older version, it should still open new files perfectly fine.

Do you use it for anything other than syncing code? Currently I’m using plain SSH sync for all my personal git repos, and I’m not sure if there’d be any advantage in switching to Forgejo.

Are you suggesting that no one is allowed to see Nintendo do a new bad thing and say “I’m no longer willing to give them my money”?

Not to mention there’s nothing ‘amicable’ about a massive corporation, infamous for their lawsuits, approaching a single programmer with a deal that is obviously the only way to avoid being sued, despite the fact that emulators are legal.

If someone purchases a Switch game they have every right to back it up and use an emulator to play it. Instead of strongarming these projects into submission, the ethical thing would be working with them to sell legal access to ROMs.

I’m not against the idea, but I do think it’s a bit unfair. There are dozens of projects KDE relies on that never even get the chance to ask for donations this way, simply because they don’t need a GUI.

I believe KDE should at least offer to share the donations with other projects, projects that would otherwise have no voice. Something like the old Humble Bundle donation method would work really well, and let users to choose how their money is allocated.