← Back to context

Comment by hypfer

1 day ago

I wouldn't list Opencode as "good reputation".

They had their own unbound "harness scans the whole user directory" oopsie and handled concerns about that by introducing code signing.

Which, yes, does have absolutely nothing to do with that issue.

I guess by now it is better, but to me they seem to lack the engineering culture necessary for a "good reputation" stamp.

__

Ref: https://github.com/anomalyco/opencode/issues/14925#issuecomm...

among other issues.

How about the one where if you start a session outside of a Git repository, the "worktree root" is set to /. Bug report closed as "not planned".

  • FWIW, I don't think that they're being malicious. They instead just seem to have no idea nor do they care.

    And the original comment I've replied to proves this strategy right! So from a business standpoint: excellent work.

    • Glad my arbitrary failure to try them has worked out! For people seeking OS-native harnesses, I can recommend Factory's Droid. I know I'll be returning to it with my head hung low today, after I uninstall ZCode.

      It does have a "mission" feature that's stuck in the strange, distant times of 2025 by way overdoing mandatory verification steps, which means they don't support swarms/workflows/crews/fleets yet -- that is, it's all done in sequence. But they have the boring, corporate engineering attitude that I think we're are all craving rn, and generally seem competent.

      I can heartily dis-recommend Vix, even though they gamed themselves to the top of at least one ranking site that shall not be named; exactly like the quasi-bad-faith incompetence described with OpenCode above, but without even the "Open-" branding! Though perhaps that word has been so thoroughly burnt as a prefix by Sam Altman & Microsoft's criminal behavior that we should let it go...

      Is this how "FLOSS" wins over "OSS"? Not with an ideological bang, but with a marketing issue?

      5 replies →

Their reputation is “bad” but not because of privacy concerns. I personally think they’re trustworthy

  • We use opencode with self hosted llm for privacy reasons. Good, right? Well, no, because opencode by default uses a "free" cloud model to summarize all chats even if a different model was configured as the main one.

    I wonder how many opencode users upload their private secrets to the cloud, while thinking they're using a self hosted model.

    Btw. I don't think this is malicious, just sloppy.