This is a very rough, optimized, vibe-coded, read-only, zero-dependency, documentation- and authentication-free, dog-fooded, open-source raw Git repository viewer written in PHP for self-hosted...
This is a very rough, optimized, vibe-coded, read-only, zero-dependency, documentation- and authentication-free, dog-fooded, open-source raw Git repository viewer written in PHP for self-hosted repositories (on a shared host). It does not exec or invoke system calls. Cloning not yet supported. Allows playback of some audio and video, renders images and SVG files inline, overzealously detects files as binary. Allows controlling home page sort order and hiding (-) of repos by listing them in a file named order.txt.
Looks pretty neat. True for php, the front-end has one external dependency <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css"> The version is...
Looks pretty neat.
zero-dependency,
True for php, the front-end has one external dependency
The version is also interesting. Font awesome is currently on 7.x, the latest 6.x version that came out was 6.7.2 on December 16 of 2024. 6.4.0 was released on March 3 of 2023.
It is one of those things you need to watch for when using LLMs. With dependencies it is easy enough to spot, if you remember to double check the version they recommend. With outdated paradigms and security practices it is a bit more difficult to tell at times.
There is also other things that make it clear that it is at the very least rough and potentially the result of this being vibe coded. There are some things like re-inventing the wheel for things that modern PHP can also do easily like the media type sniffer logic, a whole plate worth of spaghetti echo usages in some files where in others a more reasonable approach is used, lots of error suppression (not quite the same as throwing away unit tests, but also very good at hiding issues), home directory traversing which probably should just be a configuration value. Basically there are a few more things like that combined with what I feel is a lack of overall cohesive structure. But, if I am being honest, I am also not really feeling like code commenting an LLMs work in much more detail than I already did.
Overal, if it works for you it really is a neat project. But I'd personally would triple check a lot of things, certainly security, before throwing it on the internet like this.
This is a very rough, optimized, vibe-coded, read-only, zero-dependency, documentation- and authentication-free, dog-fooded, open-source raw Git repository viewer written in PHP for self-hosted repositories (on a shared host). It does not exec or invoke system calls. Cloning not yet supported. Allows playback of some audio and video, renders images and SVG files inline, overzealously detects files as binary. Allows controlling home page sort order and hiding (
-) of repos by listing them in a file namedorder.txt.Be gentle with it, it's only a few hours old.
I'm tired, boss
Looks pretty neat.
True for php, the front-end has one external dependency
The version is also interesting. Font awesome is currently on 7.x, the latest 6.x version that came out was
6.7.2on December 16 of 2024.6.4.0was released on March 3 of 2023.It is one of those things you need to watch for when using LLMs. With dependencies it is easy enough to spot, if you remember to double check the version they recommend. With outdated paradigms and security practices it is a bit more difficult to tell at times.
There is also other things that make it clear that it is at the very least rough and potentially the result of this being vibe coded. There are some things like re-inventing the wheel for things that modern PHP can also do easily like the media type sniffer logic, a whole plate worth of spaghetti
echousages in some files where in others a more reasonable approach is used, lots of error suppression (not quite the same as throwing away unit tests, but also very good at hiding issues), home directory traversing which probably should just be a configuration value. Basically there are a few more things like that combined with what I feel is a lack of overall cohesive structure. But, if I am being honest, I am also not really feeling like code commenting an LLMs work in much more detail than I already did.Overal, if it works for you it really is a neat project. But I'd personally would triple check a lot of things, certainly security, before throwing it on the internet like this.