https://code.europa.eu has a new look!

Our repository for free, open source software developed by the European institutions now highlights the trending projects and makes searching and contributing to projects easier.

code.europa.eu aims to make public-funded open source code more accessible and reusable for public services, citizens and businesses alike.

Read more 🔗 https://link.europa.eu/NMhTHn

@EC_OSPO

@EC_DIGIT @EC_OSPO Quite unbelievable and very hard to understand: Why oh Why is the European Union using software (for hosting open-source projects) coming from a commercial company headquartered on the other side of the pond? Why Gitlab?

Why not ForgeJo for example, with strong European roots and even better: open-source itself?

@enigmax @EC_DIGIT @EC_OSPO I'm pretty sure that the instance is older than Forgejo.
And otherwise it's FOSS.

So everybody can fork GitLab the same way as gitea forked gogs and Forgejo forked gitea.

Do you have any concerns in particular that would make a difference based on where certain people of FOSS are based in?
Do you generally avoid FOSS where the maintainers live in the US?

Honest question because I'm pretty sure missing something here‽

@alexanderadam @EC_DIGIT @EC_OSPO ....it can't be fully FOSS, because https://code.europa.eu references Gitlab Ultimate features - meaning it's most likely paid and at least partially proprietary.

"Project's hosted on code.europa.eu can benefit from Gitlab's Ultimate features, including a variety of security scanning capabilities."

@alexanderadam @EC_DIGIT @EC_OSPO ... and no, I do not have concerns on the whereabouts of contributors/owners of FOSS.

My remark relates to the fact that the EU views cloud sovereignty as a cornerstone of its strategic autonomy. IMHO that's pretty hard by using/paying for proprietary stuff from outside the EU?

@enigmax @EC_DIGIT @EC_OSPO but GitLab is not proprietary, isn't it?
And you can host it wherever you want too.

EDIT: ah, I didn't see your other post before ( https://mstdn.social/@enigmax/116211911791127284 ).
Your concern is about the ultimate features.

That won't explain the hosting argument though.

This topic is pretty difficult though. I prefer FOSS everywhere but I don't have a definitive answer on how to have sustainable development on it.
How do you allow professionals to make a living from FOSS?

EnigmA-X (@[email protected])

Attached: 1 image @[email protected] @[email protected] @[email protected] ....it can't be fully FOSS, because https://code.europa.eu references Gitlab Ultimate features - meaning it's most likely paid and at least partially proprietary. "Project's hosted on code.europa.eu can benefit from Gitlab's Ultimate features, including a variety of security scanning capabilities."

Mastodon 🐘

@enigmax how do we make sure that the Linux kernel is not only getting features for the big cloud companies but also for the average desktop user?
How do we make sure that Firefox stays secure and is getting modern web features?

How do we make sure that we have competitive FOSS solutions that are trustworthy but also safe to use in the long term?

…anyway. Maybe that whole AI stuff will make these questions obsolete.
Maybe somebody forks GitLab and Claude Code adds all Ultimate features in…

@enigmax a weekend.

But maybe AI also makes everything worse because we don't check the 100st contribution as well as the 99 before — because they weren't great.
Yet the 100st contribution contains the tiny backdoor that breaks our necks?

I understand the "Ultimate" concern but it's not that bad to me.

Thank you for your feedback.

@alexanderadam Gitlab CE is FOSS. Yes. Gitlab EE is not.

However, imho you're going on quite a #whataboutism tour.

The EU states FOSS *and* sovereignty (cloud, data and tech) as a cornerstone now. Imho that can simply not be achieved like this.

Spending EU funds on Gitlab doesn't fit that cornerstone and means you cannot spend them elsewhere.

To me, it's just a simple but crystal clear case of (not) "practice what you preach".

@enigmax I understand that you don't like the approach of having proprietary enterprise features but may I ask how you'd like to tackle having FOSS development financed?

I also know European projects who do it the same way (i.e. #OpenProject and #OpenCloud ).

Would it be better for you if the GitLab HQ would be in Brussels but there would still be proprietary modules or is both unacceptable for you?

@alexanderadam Sometimes proprietary features are inevitable (which I do not belief is the case here) - but if there is no other feasible option, it should at least originate from an European company.

The whole sovereignty topic is not only about investing in the right location (Europe) but also about mitigating risk of the US making (some more) questionable decisions. Gitlab HQ in EU wouldn't be sufficient to me, all of Gitlab in EU would be a step in the right direction. Yet, still not FOSS.

@enigmax @alexanderadam I doubt there is any spending on GitLab. https://about.gitlab.com/solutions/open-source/ "Features of GitLab Ultimate — including 50,000 compute minutes — are free to qualifying open source projects through the GitLab for Open Source Program". And they seem to host it themselves, probably in EU
GitLab for Open Source Projects | GitLab

Open source communities benefit from The DevSecOps Platform.

about.gitlab.com
@EC_DIGIT @EC_OSPO, is this repository built specifically for EU institutions only, or can EU member states use it too? If they can, is it restricted to institutions only, or can it be used by, for example, scientists working on projects financed by grants?

@[email protected]

Yes. No. Maybe :-). It depends.

code.europa.eu is the code development platform for open source projects shared
by the institutions of the European Union. More precise, it is the
code development platform for open source software projects for which
European Union institutions, bodies, offices and agencies hold the
intellectual property rights.

@EC_OSPO, I asked because I've noticed a trend where some scientists (at least here in Lithuania) will get a grant to produce a piece of open-source software, build it, make it public, claim it to be open-source, but not take the final step of actually publishing the source code for anyone and everyone to be able to access it in a convenient manner. It feels like this is sometimes even intentional, in order to make sure that only companies they happen to also work for/with benefit.
Having a clear requirement to publish all source code and data in a forge not directly under their own control would be beneficial for everyone, in my opinion, so I was wondering if https://code.europa.eu could be that independent forge. But, I guess, not now at least?
code.europa.eu - Code development platform

European Commission’s open source collaboration platform, managed by the EC OSPO

@rq

so, somewhat like

https://code.europa.eu/eurohpc-ju

that we do

EUROHPC-JU · GitLab

Welcome to code.europa.eu

GitLab
@EC_OSPO, yeah, something like that.

@EC_DIGIT @EC_OSPO All these fanfares about applying new lipstick to an old pig, but you don't even bother to customize the default Gitlab branding on the site itself.

But I get it, managers and politicians only ever look at the pretty landing pages, and nobody cares about what the rubes see while working.

@ticho Who cares? Do we need to rebrand our power tools or is an owner sticker good enough?