6 comments

[ 3.3 ms ] story [ 18.5 ms ] thread
> GitHub didn’t seem (or didn’t want) to realize they were attacking our core business directly.

They don’t explain what they think GitHub should, or even could, have done instead. Should GitHub have stopped improving their product, even in ways like the ones mentioned (package distribution, minimal issue management, security scanning) that were obvious and in-demand years ago?

To me, the post doesn’t acknowledge that GitHub did nothing wrong or even unpredictable, and Gemnasium accepts full responsibility for the outcome.

Another way to write the GitHub-related part of this post would be “We had years to make this a business before GitHub acted on customer requests for things that customers obviously wanted. GitHub actually moved slowly enough that we had more time than any reasonable entrepreneur might have expected. We couldn’t.”

It sucks that their business was, effectively, obsoleted by GitHub. I totally get that.

However, if your business can be pretty much wiped out by another company simply adding a new feature to their own product, well, one could argue that you didn't really have much of a product to begin with.

I don't know if that's necessarily true. Just following GH as an example. If they added CI it would probably severely hurt every hosted CI platform but that doesn't mean companies like Travis aren't providing a useful product.
Github could have notify Gemnasium about their new product. Instead of make them work on a new integration that would be useless just a few month later.
They could have, but I've worked with many ecosystems/platforms/partner programs (AWS, Heroku, GitHub, Asana, Trello, others) and their starting point is that partners need to - and know they'll need to - build a product that's deep enough to succeed on its own. If you need your "partner" just to be in business, it's not a partnership at all.

Just because GitHub offers a minimal version of something doesn't mean all others will become "useless just a few month later." It means the partner product will need to be more sophisticated, or provide a better customer experience, or obtain additional distribution/direct access to their customers, or solve some other problem too, or accept a smaller addressable market. Basically, compete.

If your statement was true, every AWS product would have made every other competitor "useless." For example, Amazon SES would have obsoleted Sendgrid, Postmark, and many other high-volume email delivery providers. While SES certainly made other vendors adapt, it didn't become impossible to succeed at email delivery. GitHub didn't make it impossible to succeed at dependency security management, either.

It would be fair for Gemnasium to say that Gemnasium tried to build a business that depended almost entirely on GitHub for distribution, and that turned out to be a poor risk. That was Gemnasium's choice, though, not GitHub's.