Yes, projects backed by multi-billion dollar companies do tend to be more resistant to that kind of attack.

It wasn’t “easy” at all, they had to put in over 2 years of useful contributions before there was chance to insert the malware. If you’re worried just stay on an older version, it should still open new files perfectly fine.

Do you use it for anything other than syncing code? Currently I’m using plain SSH sync for all my personal git repos, and I’m not sure if there’d be any advantage in switching to Forgejo.

I’m not against the idea, but I do think it’s a bit unfair. There are dozens of projects KDE relies on that never even get the chance to ask for donations this way, simply because they don’t need a GUI.

I believe KDE should at least offer to share the donations with other projects, projects that would otherwise have no voice. Something like the old Humble Bundle donation method would work really well, and let users to choose how their money is allocated.

I would’ve thought they install licence plate frames when they put the cars out on display, though I do find the idea of dealerships running around randomly mounting them to other people’s cars amusing.