<story><title>Lack of cdnjs activity</title><url>https://github.com/cdnjs/cdnjs/issues/13524</url></story><parent_chain></parent_chain><comment><author>thomasfromcdnjs</author><text>Hey everyone,&lt;p&gt;My name is Thomas, one of the original founders of cdnjs along with Ryan (linked below by another commenter).&lt;p&gt;We originally posted cdnjs on Hacker News in 2011 -&amp;gt; &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=2828516&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=2828516&lt;/a&gt;&lt;p&gt;The project was originally created on AWS Cloudfront, Ryan and I thought we could handle the bills. In retrospect that was incredibly naive so we were fortunate to partner with Cloudflare.&lt;p&gt;At the time, cdnjs was a baby, Cloudflare had just started entering the market.&lt;p&gt;In short, Cloudflare always owned the domain, cdnjs.cloudflare.com, meaning, we were constrained to work under the DNS level.&lt;p&gt;We have both put considerable amounts of work into the project, but nothing compared to the community and the &amp;quot;core&amp;quot; contributors. I put &amp;quot;core&amp;quot; into quotes because for the last 5 years, cdnjs has largely been run by a highly dedicated man named Peter.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;PeterDaveHello&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;PeterDaveHello&lt;/a&gt;&lt;p&gt;Peter built enormous amounts of infrastructure to support cdnjs. He is extremely diligent, intelligent and determined.&lt;p&gt;The project was Ryan&amp;#x27;s and I &amp;quot;baby&amp;quot; but we were happy to relinquish control, sorry for all the &amp;quot;buts&amp;quot;, but we were not in a position to control due to the technical and commercial reasons.&lt;p&gt;Ryan and I have never personally profited off the project, we&amp;#x27;ve only paid bills and late night ssh sessions.&lt;p&gt;Conversations are underway to move forward, it is likely that the project will move to an unpkg setup (assets are just mirrored to npm).&lt;p&gt;A lot to say, but I&amp;#x27;m at a lack of words.&lt;p&gt;Happy to answer any and all questions.</text></comment>
<story><title>Lack of cdnjs activity</title><url>https://github.com/cdnjs/cdnjs/issues/13524</url></story><parent_chain></parent_chain><comment><author>petecooper</author><text>I am a former maintainer &amp;#x2F; librarian on cdnJS. I helped out some years ago when I wanted to learn how version control and git worked. This was in the pre-automation era (2013 to 2014 in my case), and I went through the existing libraries to find outdated instances, located new versions of the same, raised the PR to update it. All good.&lt;p&gt;Back then, and I don&amp;#x27;t know how much has changed, the libraries were maintained on GitHub and CloudFlare did the hosting. I wasn&amp;#x27;t aware of any problems with either organisation doing what they were doing, the system worked just fine. The founders (see &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;cdnjs.com&amp;#x2F;about&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;cdnjs.com&amp;#x2F;about&lt;/a&gt; for confirmation) Thomas and Ryan were around, but not super active. Thomas was involved in building out some of the automation infrastructure, but the day-to-day of updating the repo was largely undertaken by the maintainers, and that was fine. I never &amp;#x27;met&amp;#x27; either founder, but we had occasional email back and forth and they were grateful for my maintainer-ing.&lt;p&gt;I used the GitHub Mac app because I was finding my way. Whenever I changed any library, the action of the app checking a HUGE repo for any changes pegged my laptop for a few minutes every time. Not ideal, but the process of doing this librarian-ing helped me learn about a heap of stuff.&lt;p&gt;According to [1] I stopped on cdnJS mid-2014. Things got a bit twitchy for me when a library (edit: jPlayer) was pulled from the file structure because it was compromised (edit: XSS) or found malicious at release. I had a couple of user complaints directed at me because I was the one that added it in good faith originally (it passed the malware checks I ran on it). The founders stepped up to explain it wasn&amp;#x27;t me that was to blame, and one person didn&amp;#x27;t take that too well -- basically they found me on other software forums, posted threats to me and explained how the library that I had added, and someone else had removed, was crucial to their business and they&amp;#x27;d lost such-and-such dollars in revenue with that library 404-ing without notice and that they were coming to find me and extract the money from me by force. It all died down a few weeks later.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;petecooper?tab=overview&amp;amp;from=2014-12-01&amp;amp;to=2014-12-31&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;petecooper?tab=overview&amp;amp;from=2014-12-01&amp;amp;t...&lt;/a&gt;&lt;p&gt;Edits: clarity.</text></comment>