Anyone else get a vague GitHub shakedown notice?

Hacker News Top News

Summary

A QGIS developer received a confusing GitHub email about upcoming billing for Code Quality, sparking discussion on the mailing list about potential surprise charges and whether the notice was legitimate or mistaken.

No content available
Original Article
View Cached Full Text

Cached at: 07/10/26, 06:12 PM

# [QGIS-Developer] anyone else get a vague github shakedown notice? is this about qgis? Source: [https://lists.osgeo.org/pipermail/qgis-developer/2026-July/068430.html](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/068430.html) **Greg Troxel**[gdt at lexort\.com](mailto:qgis-developer%40lists.osgeo.org?Subject=Re%3A%20%5BQGIS-Developer%5D%20anyone%20else%20get%20a%20vague%20github%20shakedown%20notice%3F%0A%20is%20this%20about%20qgis%3F&In-Reply-To=%3Crmi4ii624zv.fsf%40s1.lexort.com%3E) *Fri Jul 10 09:17:56 PDT 2026*- Previous message \(by thread\):[\[QGIS\-Developer\] Coming soon: QGIS Plugins Website v4\.0\.0](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/068425.html) - **Messages sorted by:**[\[ date \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/date.html#68430)[\[ thread \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/thread.html#68430)[\[ subject \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/subject.html#68430)[\[ author \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/author.html#68430) --- ``` tl;dr: I got an email from github threatening to start billing me, and have eliminated most reasons why it would have arrived, and my qgis association is next. For background, I've had a github account for a long time, but never signed up for a paid plan or given them billing information. I have been a listed member of a few organizations, that I "left" a few months ago as the tone of paid services and AI increased, since they were defunct anyway. A few days ago I got email, purporting to be from github, delivered via sendgrid, and DKIM signed from github. So I suspect it's really from them. Trimming parts that aren't useful enough for anyone to read: You're receiving this because your organization is using the GitHub Code Quality public preview. As we shared on June 16, Code Quality moves to general availability on *July 20, 2026*. This email covers the details: what you'll pay, what's included, and how to prepare. *Pricing* Code Quality is priced as a *base subscription plus metered usage* : Component How it's billed What it covers *Per-committer license* $10 per active committer per month Enterprise access to Code Quality: findings, scoring, Rulesets integration, Security Overview, and org-level governance *AI-powered usage* Usage-based (AI Credits) Copilot code review on Code Quality-enabled repos, AI-assisted detection, Copilot Autofix generation *Deterministic analysis* GitHub Actions minutes CodeQL-powered maintainability and reliability scans — fast, predictable, and token-free Active committers are counted on repositories where Code Quality is enabled, using the same active-committer methodology as GitHub Advanced Security. For more information, you can review our documentation here ( https://docs.github.com/billing/concepts/product-billing/github-code-quality ). *How to prepare* * If you have a GitHub or Microsoft account team, reach out to them with any questions. They have a pricing calculator and can model costs based on your actual usage. * Evaluate your repository coverage. Decide which repositories should continue with Code Quality enabled after July 20. Disabling Code Quality on a repository before July 20 means no charges for that repository. More details are available in our documentation ( https://docs.github.com/code-security/concepts/about-code-quality ). You are receiving this because you’re a part of GitHub Sponsors. As for sponsors, I am not enrolled, and I have not sponsored anyone. So their email is wrong. I wonder: - is qgis using "Code Quality" and somehow because I have a clone, have filed issues/etc. I got it? - did others get this? - any thoughts on whether this is confused, vs underhanded, and is anyone worried about surprise bills? ``` --- - Previous message \(by thread\):[\[QGIS\-Developer\] Coming soon: QGIS Plugins Website v4\.0\.0](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/068425.html) - **Messages sorted by:**[\[ date \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/date.html#68430)[\[ thread \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/thread.html#68430)[\[ subject \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/subject.html#68430)[\[ author \]](https://lists.osgeo.org/pipermail/qgis-developer/2026-July/author.html#68430) --- [More information about the QGIS\-Developer mailing list](https://lists.osgeo.org/mailman/listinfo/qgis-developer)

Similar Articles

Surprise, Pay $1000

Hacker News Top

Forestwalk Labs tried Blacksmith as a cheaper, faster CI alternative to GitHub Actions, but after exceeding the free trial limit they were unexpectedly invoiced $1,081 without service disruption, raising questions about SaaS billing practices.

What's Wrong with GitHub

Lobsters Hottest

GNU Project publishes an article urging developers to avoid hosting repositories on GitHub, criticizing its licensing confusion, mandatory nonfree JavaScript, SaaSS practices, and centralization of the distributed Git ecosystem.