First impressions on #github sponsors from dry-rb creator.

> It can become a job and for many Open Source contributors it does become their second job. The problem? Nobody really has the time to do this job and to make things worse barely any Open Source contributor is being paid to do it. As a result many contributors flip the table and quit. This is the reason why I am very happy to see GitHub Sponsors!

Github Action to share your productivity stats in your Github profile.

https://github.com/matchai/waka-box

#github

GitHub Action to cache your dependencies.

https://github.com/actions/cache

#github

> Malicious code can be inserted into any #github action, even those which are tagged.

I have raised this question multiple times with different projects, but it seems that best practices are not yet stabilized enough for this new platform.

There are other security considerations as well, we will cover them pretty soon in other materials.

​​Official #github CLI.

https://cli.github.com/

​​⚡Breaking news!

#npm is joining #github!

npm is a critical part of the #js world. The work of the npm team over the last 10 years, and the contributions of hundreds of thousands of open source developers and maintainers, have made npm home to over 1.3 million packages with 75 billion downloads a month. Together, they’ve helped JavaScript become the largest developer ecosystem in the world. We at GitHub are honored to be part of the next chapter of npm’s story and to help npm continue to scale to meet the needs of the fast-growing JavaScript community.

Looking further ahead, we’ll integrate GitHub and npm to improve the security of the open source software supply chain, and enable you to trace a change from a GitHub pull request to the npm package version that fixed it. Open source security is an important global issue, and with the recent launch of the GitHub Security Lab and GitHub’s built-in security advisories, we are well-positioned to make a difference. In addition, GitHub Sponsors has already paid out millions of dollars to open source contributors, and we’re excited to explore tasteful ways to extend it to the npm ecosystem.

https://github.blog/2020-03-16-npm-is-joining-github/

​​Introducing you misspell-fixer-action. It is a #github action that will fix your typos and grammar errors in both source code and documentation.

And then send you a pull request with the fixes it made! It is an auto-formatter, but for natural languages.

https://github.com/sobolevn/misspell-fixer-action

Here's an example:

​​For Open Source or event maintainers that share a project twitter account, twitter-together is a GitHub Action that utilizes text files to publish tweets from a #github repository. Rather than tweeting directly, GitHub’s pull request review process encourages more collaboration, Twitter activity and editorial contributions by enabling everyone to submit tweet drafts to a project.

https://github.com/gr2m/twitter-together

#js

​​⚡Breaking news!

Your instant dev environment.
Get the full #vscode experience without leaving GitHub.

Code, build, test, debug, and deploy with a complete development environment in your browser.

Personal opinion: I got lucky enough to be invited to test this feature. And it works amazingly well! I really love #github, it is my favourite social network. Now with embeded IDE!

https://github.com/features/codespaces

​​Github action that uses machine learning to detect potential toxic comments added to PRs and issues so authors can have a chance to edit them and keep repos a safe space.

It uses the Tensorflow.js toxicity classification model.

It currently works when comments are posted on issues and PRs, as well as when pull request reviews are submitted.

https://github.com/charliegerard/safe-space

#ds #js #github