Skip to main content

How to get off your lazy arse and contribute to an open source project

I have a bug in my code. Only it isn't I who made it. It belongs to one of the numerous open source software components in my software. How do I fix that?

I have only run into one other developer I know from the local community contributing to an open source project (not counting project devs/committers) on random occurence. Very few of open source software users contribute back to the projects. I think there is a huge amount of lurkers; people who observe the project but fail to contribute their own solutions back to the project when they encounter problems with the software (or lack of documentation).

I wrote this post while trying to get a Struts2 bug fixed. I'll keep real-life descriptions in italic font like this.

1. Identify your bug

You usually stumble on a bug when you're trying to use the component in some funny, modern, weird or alien way; integrating with another component, using rarely used/tested configuration, or simply using code from an unstable branch of the source code (bleeding edge).

The best way to isolate a bug is to recreate the conditions under which it occurs. The most handy way of writing this is by writing an executable test (a unit test if you will).

Is the bug already identified? Someone else might've had the exact same problem. Search mailing lists, issue tracker and the web in general to see if anyone else have been affected by the bug (and team up with them if so). There's no need to duplicate the identity of a bug.

I stumbled onto a bug when trying to unit-test my Struts actions' validation mechanisms. I have done so with the use of the ActionValidatorManager without problems in earlier version of Struts2 (WebWork). I searched the user-list and found another guy who has suffered the exact same problem some five days before. I added my own description of the problem to add some attention to the issue, adding some more details to the problem description, hoping that a project developer (dev) or experienced user would suggest a solution.

2. Get help

Ask around on the projects mailing list whether this is a real bug (try sticking to the user-list and not waste developer time if it's not a real issue). Many times developers or users will point out an error in your configuration, or tell you to upgrade to a later version of the component. If it is a real bug, they will probably ask you to file an issue in the issue tracker. Yes, you. Because you (the reporter) discovered the bug and you are probably the one best able to describe the problem and recognize when it has been fixed.

Three days after my mail to the thread mentioned, the problem was confirmed by Rich Thornett.

3. File an issue (document the bug)

Most issue trackers guide you into providing the crucial details you should provide to describe the bug, including environment, configuration, component version, etc. I think the best way to describe a bug is by attaching a unit-test that recreates the bug. This isn't always easy, but still there is no better way to define a bug and have a fine-grained definition of whether the bug has been fixed or not. The test is either green or red. Those of you who already do test-driven development (TDD) will recognize this step. Those of you who don't, well, get a book and figure out TDD.

Rich did us the favor of filing the issue, so I didn't have to do much at this point. I eventually (today) attached a unit-test to the issue that might get patched into the Struts2 code so the error will not reoccur in the future. I discovered that this is not really a bug if you take the effort of using the StrutsTestCase in your unit-tests, but I found a new bug being problems integrating the StrutsTestCase with the Spring objectFactory. I'll look into this later.

4. Fix the issue (submit a patch)

This is where the lazy ones quit. A project developer might be able to fix the bug in 2 minutes, so it's definitely an easy option to leave it to'em. However, if no one else suffers the effect of the bug, it will not be prioritized by the devs and it might be up to yourself to fix the bug. So get the code out! We're talking trunk-code that should be easily available from the projects SVN or CVS repository.

At this point I want to add to you anti-Mavenizers out there, this is where the advantage of Maven comes in full. I can get the code up and running in my Eclipse in 2 minutes since they use Maven. I don't have to read a friggin out-of-date developer guide before figuring out how to dev the code, spending an hour getting the deps right, then configuring them into Eclipse. Having a mavenized project makes it easier for others to submit patches to your project!

Have a look at the existing unit-tests that exist in the project. Now, for a moment (or more likely a few hours), pretend that you are a project developer and create a unit-test that isolates your bug if you didn't do so already when filing the issue). Finally, start debugging! Try to minimize the structural changes done to the source-code. This will increase the chances of the project devs absorbing your patch into the trunk-code.

In the Struts2 case, I haven't found this solution. I will continue to work on it, but hopefully it will attract enough buzz to get the devs interested and speed up the process.

Popular posts from this blog

Encrypting and Decrypting with Spring

I was recently working with protecting some sensitive data in a typical Java application with a database underneath. We convert the data on its way out of the application using Spring Security Crypto Utilities. It "was decided" that we'd be doing AES with a key-length of 256, and this just happens to be the kind of encryption Spring crypto does out of the box. Sweet!

The big aber is that whatever JRE is running the application has to be patched with Oracle's JCE in order to do 256 bits. It's a fascinating story, the short version being that U.S. companies are restricted from exporting various encryption algorithms to certain countries, and some countries are restricted from importing them.

Once I had patched my JRE with the JCE, I found it fascinating how straight forward it was to encrypt and decrypt using the Spring Encryptors. So just for fun at the weekend, I threw together a little desktop app that will encrypt and decrypt stuff for the given password and sa…

Managing dot-files with vcsh and myrepos

Say I want to get my dot-files out on a new computer. Here's what I do:

# install vcsh & myrepos via apt/brew/etc
vcsh clone https://github.com/tfnico/config-mr.git mr
mr update

Done! All dot-files are ready to use and in place. No deploy command, no linking up symlinks to the files. No checking/out in my entire home directory as a Git repository. Yet, all my dot-files are neatly kept in fine-grained repositories, and any changes I make are immediately ready to be committed:

config-atom.git
    -> ~/.atom/*

config-mr.git
    -> ~/.mrconfig
    -> ~/.config/mr/*

config-tmuxinator.git  
    -> ~/.tmuxinator/*

config-vim.git
    -> ~/.vimrc
    -> ~/.vim/*

config-bin.git   
    -> ~/bin/*

config-git.git          
    -> ~/.gitconfig

config-tmux.git  
    -> ~/.tmux.conf    

config-zsh.git
    -> ~/.zshrc

How can this be? The key here is to use vcsh to keep track of your dot-files, and its partner myrepos/mr for operating on many repositories at the same time.

I discovere…

Always use git-svn with --prefix

TLDR: I've recently been forced back into using git-svn, and while I was at it, I noticed that git-svn generally behaves a lot better when it is initialized using the --prefix option.

Frankly, I can't see any reason why you would ever want to use git-svn without --prefix. It even added some major simplifications to my old git-svn mirror setup.

Update: Some of the advantages of this solution will disappear in newer versions of Git.

For example, make a standard-layout svn clone:

$ git svn clone -s https://svn.company.com/repos/project-foo/

You'll get this .git/config:

[svn-remote "svn"]
        url = https://svn.company.com/repos/
        fetch = project-foo/trunk:refs/remotes/trunk
        branches = project-foo/branches/*:refs/remotes/*
        tags = project-foo/tags/*:refs/remotes/tags/*

And the remote branches looks like this (git branch -a):
    remotes/trunk
    remotes/feat-bar

(Compared to regular remote branches, they look very odd because there is no remote name i…

Considerations for JavaScript in Modern (2013) Java/Maven Projects

Disclaimer: I'm a Java developer, not a JavaScript developer. This is just what I've picked up the last years plus a little research the last days. It's just a snapshot of my current knowledge and opinions on the day of writing, apt to change over the next weeks/months.

We've gone all modern in our web applications, doing MVC on the client side with AngularJS or Ember, building single-page webapps with REST backends. But how are we managing the growing amount of JavaScript in our application?
You ain't in Kansas anymore So far we've just been doing half-random stuff. We download some version of a library and throw it into our src/main/webapp/js/lib, or we use it from a CDN, which may be down or unreachable when we want to use the application..

Some times the JS is minified, other times it's not. Some times we name the file with version number, other times without. Some times we get the latest library of master branch and name it with the commit-id in the fi…

Microsoft ups their Git efforts another notch

This week Microsoft announced first class Git support embedded in the coming version of Visual Studio.

Now, it's not completely shocking. We could have seen it coming since Microsoft started offering Git repos on CodePlex, and more recently offering a Git client for TFS. In any case, these are some big news. Scott Hanselman weighs on some features and some more background here.

For those who are a bit unaware of what the Git situation on Windows looks like these days, I've dotted down these notes:
Some explanation on these:

msysGit has long been The Way to use Git on Windows. It's basically a port of Git itself, so it's a command-line tool.GitExtensions (includes Visual Studio integration), TortoiseGit, Git Shell, posh-git and most other tools are powered by msysGit.libgit2 is a native library for doing Git stuff. It is developed completely separate from Git itself. The above tools could (and should) probably use libgit2 instead of hooking onto and around msysGit.Github…