Vintage Story: I think sneaking impactful code into a mod meant as dependency, ui or api is a dangerous violation of trust, and should be taken more serious than it is rn.
(Forwarded from the Vintage Story reddit, as I believe this appears to be relevant to more games often.)
Yesterday on the Vintage Story discord, there had been reports that some mods were mysteriously crashing, one of which being the Caves n Caverns mod. But the leading cause didn't come from it or a compatibility issue, but instead came from a completely different mod; ConfigLib, a popular dependancy for many mods, one that was made by one of the game devs itself. Turns out, ConfigLib had a feature implemented that was meant as an anti-cheat feature that deals with encryption.
The idea is precarious at best, but clearly it's harming usage of other mods by just interrupting your game client. But when it was released, it was deemed "pointless" now it was exposed, and was just removed. End of story.
I'm not going to dive into the reasons why this was added, but there is a stern thought that doesn't sit well with me; This is code that directly affects your game or other mods. And it is code that is NOT disclosed to be added (logically, but still). Personally this feels like a strong breach of trust because appearantly they found it no problem at all to sneak in code against its users knowing, and now this has been exposed, what more secret code are we supposed to expect to find in this- or other mods, that we don't know about yet?
I think sneaking in code is dangerous. An Easter egg, reference or homage/credit is one thing, but something like this is a whole another level.
And the peace we are expected to accept is; "you found it, it's updated and removed, carry on."?
Some comments in the original that are food for thought;
If the dev was okay doing this to one of their mods- what are we supposed to expect from all the other mods that dev made we haven't found out about yet?
The only anti-cheat mod that should exist, is the one you knowingly choose to add to your client/server.
This is a particularly dangerous move of an official dev implementing their own ideas into a game that were rejected by the other members of the team initially.