Slashdot Mirror


Alternative to SourceSafe in a Commercial Environment?

Jim the Bad asks: "After Visual SourceSafe inexplicably corrupted itself one time too many, my Boss has asked me to evaluate the alternatives. This site lists some alternatives, and SourceForge is a commercial product that might suit. Are there any more? It must be rock solid, run on Windows and it must be possible to migrate existing SourceSafe databases. Developer Studio integration is also very desirable. What product would you recommend?"

102 comments

  1. A coupla things by The+Bungi · · Score: 4, Insightful
    First, VSS is a crap version control system (if only because it's not client/server), but it doesn't corrupt itself randomly. You need to keep your database sizes to under 1GB or so, run ANALYZE on the thing at least every week (or more, depending on the activity) and generally keep binaries (especially large ones) off of it. Just because the thing has a pretty GUI doesn't mean it also takes care of itself. And of course, backup your database(s) often.

    Your Visual Studio integration requirement is a doozy. I haven't seen anything that works as well as VSS, but then again, another recommendation is to stay away from that anyway. Always use the Explorer or the command line tools.

    Finally, the alternatives. Well, there's the Very Expensive ones which I won't list because you probably know them anyway and, well, they're hideoulsy expensive.

    Then there's CVS. An el-cheapo box running Linux or BSD with decent HDD space, and WinCVS or TortoiseCVS can't be beat. I've successfully migrated some development teams to this setup (along with Bugzilla) and while there's a learning curve, it's certainly much better. Plus, developers can work from home seamlessly, which is generally not the case with VSS. There are lots of tools and help out there for CVS. Give it a try, you won't be disappointed. Plus, it's cheap!

    1. Re:A coupla things by Anonymous Coward · · Score: 1, Flamebait
      Finally, the alternatives. Well, there's the Very Expensive ones which I won't list because you probably know them anyway and, well, they're hideoulsy expensive.

      What you actually mean is that you don't know what the expensive alternatives are. There's no shame in admitting you don't know something; try it some day.

      If he's looking for good version control then CVS bites big donkey dick. But it's free. That's its only saving grace. Won't be disappointed, my ass. CVS is non-stop disappointment.

      In terms of expensive alternatives you can choose from BitKeeper, PVCS, StarTeam, Source Integrity, ClearCase, and literally fuckloads of products. This market is well and truly flooded. They all blow chunks in one respect or another. He's not going to get any of them to integrate with Visual Studio as nicely as VSS.

      If he has the money then go with ClearCase. If he wants it cheap then go CVS and optionally Sourceforge. If he wants integration with Visual Studio then he's made his own fucking bed and he can damn well lie in it.

    2. Re:A coupla things by Circuit+Breaker · · Score: 4, Informative

      I haven't seen anything that works as well as VSS

      Try Jalindi Igloo (search google for it). It integrates with VS6 as well as, if not better, than VSS. And Tortoise is simply the best UI for version control I have ever used.

    3. Re:A coupla things by signifying+nothing · · Score: 1

      If he wants integration with Visual Studio then he's made his own fucking bed and he can damn well lie in it.

      As well as being a great source code control system, ClearCase actually integrates very well with Visual Studio.

    4. Re:A coupla things by Anonymous Coward · · Score: 0

      Observation: uses the word "fucktard".

      Conclusion: 14 year old.

    5. Re:A coupla things by standsolid · · Score: 0, Offtopic
      What you actually mean is that you don't know what the expensive alternatives are. There's no shame in admitting you don't know something; try it some day.


      i bet it's even easier to say something like that when you're ac, huh?
      --
      WTPOUAWYHTTOTWPA
      What's the point of using acronyms when you have to type out the whole phrase anyways?
    6. Re:A coupla things by The+Bungi · · Score: 0, Flamebait
      What you actually mean is that you don't know what the expensive alternatives are. There's no shame in admitting you don't know something; try it some day.

      Them's mighty big words coming from an AC. Too bad you couldn't muster the balls to log in.

      I know most all of the alternatives, mainly because I've tried them at one time or another. My comment regarding CVS stands, though.

      BTW, dismissing CVS and then recommending PVCS in the same sentence is the mark of a true ignorant retard asshole, as if the rest of your insightful comment didn't cut it.

    7. Re:A coupla things by The+Bungi · · Score: 1
      Hey, that is way cool. Wish I'd seen it six months ago. I'll give it a try as soon as I have some time.

      Thanks!

    8. Re:A coupla things by Anonymous+Conrad · · Score: 1

      Plus, developers can work from home seamlessly, which is generally not the case with VSS.

      What's the problem working from home with VSS?

      Sure, you need filesystem access to the repository but you'll need that for other work-from-home stuff anyway and you can easily do that over a VPN.

    9. Re:A coupla things by yellowstone · · Score: 1
      What's the problem working from home with VSS?
      VSS accesses the code DB directly (i.e. there is no active "VSS Server"). That means you have to be able to mount the volume the code DB is on. Which is no problem if it's on the local LAN, but requires extra work to be visible outside the firewall.
      --
      150 Opening BINARY mode data connection for slashdot.sig (129323052 bytes).
    10. Re:A coupla things by yamla · · Score: 1

      You are right, VSS doesn't corrupt itself randomly. However, you forgot to mention one instance under which VSS will corrupt itself. If during a checkin, the client machine crashes, your VSS database will become corrupt. Alternatively, if during a checkin, the client machine is power-cycled, the database will become corrupt.

      At one company I worked for, we were supporting roughly twenty developers. The VSS database became corrupt about once a month even after following the other suggestions you list. The admins ended up setting up a backup job to run once an hour because VSS was so unstable.

      The next company I worked for used cvs. CVS can be a pain particularly when it comes to renaming files. And we were supporting fewer developers (around ten). However, CVS just worked. We stored binaries in the database. We never touched the CVS server. And it ran without problems for well over two years (cvs was set up before I arrived).

      --

      Oceania has always been at war with Eastasia.
    11. Re:A coupla things by Anonymous+Conrad · · Score: 1

      VSS accesses the code DB directly (i.e. there is no active "VSS Server"). That means you have to be able to mount the volume the code DB is on. Which is no problem if it's on the local LAN, but requires extra work to be visible outside the firewall.

      OK but (as I said on the next line!) chances are you'll need that kind of access for other work-from-home stuff. For example, I like to be able to fetch files from my desk PC when I'm working at home, get remote desktops to test machines, get access to central utilities stores that aren't versioned, etc.

      And my other point (on that same next line) was that it's fairly trivial to configure a Virtual Private Network from your home to your office that will effectively put your home machine on the office LAN. Problem solved - ?

    12. Re:A coupla things by Anonymous+Brave+Guy · · Score: 1
      First, VSS is a crap version control system (if only because it's not client/server), but it doesn't corrupt itself randomly. You need to keep your database sizes to under 1GB or so, run ANALYZE on the thing at least every week (or more, depending on the activity) and generally keep binaries (especially large ones) off of it.

      Actually, for practical purposes, SourceSafe does randomly corrupt your database. This is the reason for all the restrictions you mention. It fundamentally requires safe clients, and that fundamentally isn't a reliable thing to do. Requiring regular back-ups and running Analyze frequently (great, several hours of downtime when no-one can use the DB) is not an acceptable solution in a professional development environment. Hell, even MS won't use it for serious projects...

      Chalk me up as one more CVS advocate, please. It ain't perfect, but we never had a problem with it we couldn't fix.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    13. Re:A coupla things by Grab · · Score: 1

      We currently use VSS version 6. Before that, we used version 5.

      On version 5, SourceSafe would occasionally extract a random character or several from somewhere in a text file when you checked it in, and plonk that character at the end of the file. If you were lucky, the character(s) would be from some identifiable part of the code which would cause it to stop compiling, so you could trace the problem. If you were unlucky, the character(s) would be deleted from a comment and you wouldn't have a hope of finding it. If you were *real* unlucky, the character(s) would be deleted from code such that it still compiled (eg. 10u would become 1u) and then you were *really* screwed.

      Occasionally it did it to binary files as well. This was particularly bad news for Word files, as they were then irretrievably corrupted.

      On version 6, we've not had any loss of data yet. However we do have an interesting bug with labels, where when we label a file it says something about labels.ini being bad or some similar guff. The label succeeds, and ANALYSE shows no problems.

      TortoiseCVS isn't a bad solution for day-to-day version control, although it sucks badly if you want to roll back to a previous version. WinCVS provides more control over CVS, but with a crummy user interface (par for the course with OSS, and to be fair it's not too much worse than SourceSafe).

      Grab.

    14. Re:A coupla things by MillionthMonkey · · Score: 1

      We have a CVS machine which we connect to (usually) with WinCVS. One day somebody committed a new file that just happened to have the same name as a file that was removed from the same directory two years before. So CVS thought it was the same file. This would ordinarily be fine, except that the case of one of the letters in the name was different in the new name. That caused some confusion between the WinCVS client and the case sensitive CVS server.

      The result was a corrupted repository. Any attempt to do a CVS checkout or update after that resulted in a segmentation fault halfway through the process when it would reach this poison file. We tried fixing it in every "kosher" way we could think of- issuing a remove, etc.- and CVS foiled us at every turn (e.g. "File not up to date- do cvs update first.") We eventually resorted to carefully editing the history file and removing the offending entry. That really sucked.

  2. Went from VSS - CVS by HalfFlat · · Score: 4, Informative

    We used Visual Source Safe at the beginning of our project (about 10 programmers), despite calls for using CVS instead. VSS did not last three weeks. It is the embarassment of the revision control world. It is Just Broken.

    Note that Microsoft most certainly do not eat their own dog food. At least, they certainly did not then (1998-1999).

    We threw out VSS. Moved to CVS, despite losing Visual Studio integration and past revision history. In fact, we just used CVS from a command window. It worked, and worked well.

    There are commercial and free products now which probably fit your requirements. But if you can't find one, you still ought to ditch VSS and go with something that actually works. It doesn't matter how convenient your source control system is if it doesn't actually control it, or like VSS, actively corrupts it.

    1. Re:Went from VSS - CVS by inepom01 · · Score: 3, Informative

      You didn't have to lose your history or anything. There's a perl script, found here that will migrate your stuff. It is quite nice, and works with revision histories and all. The vss2cvs.pl script will migrate your stuff and another script (don't remember which) will migrate your revision histories.

    2. Re:Went from VSS - CVS by Anonymous+Conrad · · Score: 2, Insightful

      Note that Microsoft most certainly do not eat their own dog food. At least, they certainly did not then (1998-1999).

      No, they still don't - they've got an internal replacement that's command-line only. AFAIK it's basically VSS rewritten to overcome the file size limit. I'm not aware of any moves to sell it but in any case VSS always struck me as a hack developer tool boxed up and sold rather than a polished product. But I've no complaints with it - it's sold to developers who can cope.

      But that aside, there's nothing fundamentally wrong with VSS. You need to properly configure your server to handle the file locking, not to virus scan the VSS database, etc., but then it just works. It's a different branching paradigm to CVS, sure, but it works well (c.f. subversion that uses this too). And the multi-checkout-merge stuff works as well as CVS's.

    3. Re:Went from VSS - CVS by Anonymous Coward · · Score: 0

      Blame OneTree Software for Visual SourceSafe. They made this product, then shortly after its release, Microsoft announced a similar application they were making called Microsoft Delta. Microsoft then purchased OneTree and renamed SourceSafe as Microsoft Visual SourceSafe back in 1994.

  3. Hardly a suitable place to discuss this by phaze3000 · · Score: 1

    I'd suggest discussing this on a non-OSDN sponsored forum. Whilst I trust editorial integrity here, any positive appraisal of Sourceforge will (quite rightly) come under suspicion, with this being the major money-maker for those bank-rolling this site.

    --
    Blaming GW Bush for the Iraq war is like blaming Ronald McDonald for the poor quality of food.
    1. Re:Hardly a suitable place to discuss this by Anonymous+Conrad · · Score: 2, Informative

      I'd suggest discussing this on a non-OSDN sponsored forum. Whilst I trust editorial integrity here, any positive appraisal of Sourceforge will (quite rightly) come under suspicion, with this being the major money-maker for those bank-rolling this site.

      But sourceforge isn't a VSS competitor - it's a whole-process management system. Its competitors are Clearcase, Sourcecast or the free system aegis. Clearcase has its own source control system but the others are built (AFAIK) on top of CVS - *that's* the VSS competitor here.

    2. Re:Hardly a suitable place to discuss this by afidel · · Score: 1

      clearcase is great and horrible at the same time. It's great because it does its job well and never corrupts data. It's horrible because its expensive, requires HUGE expensive machines to run on, and just isn't all that pretty in some areas. We "upgraded" from cvs to clearcase and the server went from a spare P2 class rack server to some monsterous Sun machine, the developers were not ammused as they would have much rather kept the old box and spent the money on new workstations.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  4. Bitkeeper by mTor · · Score: 3, Informative
    Give Bitkeeper a try: http://www.bitkeeper.com/

    I use it and I'm very happy with it. Heck, even Linux kernel is maintained with it.

  5. SourceForge is not what you are looking for by halfnerd · · Score: 3, Informative

    Or at least i think so. If I understand this correctly then sourceforge is just like sourceforge.net - a hideously large database of projects. I don't think that's what you are looking for. CVS is tested and good. But it has some problems. Go check out subversion too - subversion.tigris.org, it's a cvs-like tool that has fixed many of cvs' inconveniences.
    and BitMovers BitKeeper is used for the Linux-kernel, so it has proven to be very reliable and extendable too.

    1. Re:SourceForge is not what you are looking for by The+Mayor · · Score: 2, Interesting

      Does anyone here have any real world experience running Subversion? It has lofty goals, and I've d/l'ed the PC version to play with, but how does it handle 100s of programmers retrieving the latest version for a rather large project? I'm really interested--I love the TortoiseCVS interface, and probably won't change the version control without something similar (there's a subversion version of Tortoise, so I'm happy with that). And any change in version control systems must at least improve upon CVS.

      --
      --Be human.
    2. Re:SourceForge is not what you are looking for by Anonymous+Conrad · · Score: 2, Interesting

      Does anyone here have any real world experience running Subversion? It has lofty goals, and I've d/l'ed the PC version to play with, but how does it handle 100s of programmers retrieving the latest version for a rather large project?

      The subversion project is itself hosted in subversion - that's probably the biggest public one.

      There were complaints a few months back about insane memory usage for commits (256mb+) but I think that was a berkeley db bug. Can't remember if it got resolved or not. I'm sure it will be before svn 1.0.

      The GCC project have CVS scalability issues and would like to migrate to subversion and there are a few GCC guys on the subversion mailing lists, so they at least have confidence in it.

  6. Gforge by R0 · · Score: 5, Informative

    Gforge is an opensource fork of Sourceforge (What irony?). You can buy support for it too.

    1. Re:Gforge by bangzilla · · Score: 1

      Yeah - it's a fork of the SF *prototype* code that was GPL'd years ago. Get SourceForge Enterprise Edition (now up to version 3.2) if you want a performant, stable, feature rich version.

      --
      Rich people are eccentric. Poor people are strange. Me, I'd be happy with odd.
    2. Re:Gforge by Anonymous Coward · · Score: 0

      savannah.gnu.org is also a fork of the gpl'd early release.

    3. Re:Gforge by R0 · · Score: 1

      Does Jabber support come under feature rich ;)

      Interview with Tim Perdue. GForge and behind the scenes at SourceForge

  7. Make up your mind... by merriam · · Score: 4, Funny
    It must be rock solid, run on Windows...

    Well make up your mind and pick one.

    I know, I know. But someone was bound to say it.

    1. Re:Make up your mind... by the+eric+conspiracy · · Score: 1

      I know, I know. But someone was bound to say it.

      Unfortunately there is a lot of truth to this. If you have a mission critical enterprise level application like a source code repository you really should run it on a very robust platform.

      You wouldn't keep your corporate financials on a simple Windows box, so why would you keep the crown jewels (source code) on the same thing?

    2. Re:Make up your mind... by Anonymous Coward · · Score: 0

      You wouldn't keep your corporate financials on a simple Windows box, so why would you keep the crown jewels (source code) on the same thing? Because they're commodity cheap and you spent the extra cash on a shit-hot tape backup solution.

  8. FreeVCS by apocamok · · Score: 3, Informative

    At work we switched to Freevcs after experiencing one too many VSS database-corruptions.

    FreeVCS is a free (as in beer) client/server VCS, using a relational database such as Firebird or Microsoft SQL Server. It is a stand-alone product, and as such offers no integration to Visual Studio (although some integration to Borland Delphi exists)

    The original author has stopped development and released the source to the open-source project JediCVS.
    JediVCS have yet to produce a release, so for now stick with FreeVCS.

    1. Re:FreeVCS by Scaba · · Score: 2, Funny
      ...relational database such as Firebird...

      I'm confused. I thought Firebird was a browser? How can two unrelated products have the same name? ;>)

    2. Re:FreeVCS by marcovje · · Score: 1

      Firebird is a RDBMS.

      I assume the browser is built on top of it :-)

      Anybody seems to be building everything on top of RDBMSes lately.

      (Mozilla a browser on top of a RDBMS,
      Microsoft an filesystem on top ..) :-)

  9. CVS doesn't "bite big donkey dick" by 0x0d0a · · Score: 1, Insightful

    If he's looking for good version control then CVS bites big donkey dick.

    Okay, I agree that CVS isn't perfect, but it certainly doesn't "bite big donkey dick". It's fairly straightforward, it's used by many, many folks out there, and there's good integration with lots of *other* development tools.

    Frankly, I think that most of the people saying that CVS "sucks" read about how someone else found it lacking, and love having something to sound bitch about. Most people that have used CVS have probably run into the same issue that I've run into: CVS doesn't handle renaming source files.

    And you hate CVS but recommend *PVCS*?

  10. StarTeam by occamboy · · Score: 1

    Excellent VCS, which also tracks change requests and bugs, making for a great tool for the development process.

    It's neither Free nor free (actually fairly expensive), but it is great.

  11. RE: Alternatives to Visual Source Safe by iid_iunknown · · Score: 5, Informative

    I have always preferred Rational ClearCase over VSS and have also used a new product from SourceGear called SourceGear Vault which claims to be a compelling replacement for VSS. Well, guess what? They're right. Not only is it a better SCC, but it also has tight integration with both VS *AND* the classic remote access products from SourgeGear (ie. SourceOffSite) for your offsite development staff. Both are recommended, but the Rational tools are a bit pricey for smaller shops. I believe that a 5-node version of SourceGear Vault is priced around $599 (if you already owen SQL Server), or $999 (which includes a SQL Server license). Take a look at SourceGear Vault

  12. MKS Source Integrity by marko_ramius · · Score: 3, Informative
    http://www.mks.com/products/sie

    Secure, stable, fast, multi-platform, good integration with issue tracking system.

    1. Re:MKS Source Integrity by borgboy · · Score: 1

      As a senior developer / team CM guy, I'll second SIE. But it is a bit pricey. The issue tracking (I assume you mean Integrity Manager) is a little complicated, but highly configurable issue tracking/workflow/swiss army knife that integrates well with SIE.
      I also admin the server - its based on WebLogic - and it's pretty simple.
      I can do checkout/checkin via broadband VPN reasonably fast. SIE supports Visual Studio 6, 7, and 7.1 (VS.Net 2002/2003) very well, and it has a good command line interface.
      On the other hand, there are other great solutions out there. Perforce is one - but its issue tracking (aka Jobs) isn't as feature-full.

      --
      meh.
    2. Re:MKS Source Integrity by Anonymous Coward · · Score: 0

      We use MKS here. It has gone through some growing pains and does have a few quirks.

      I have two problems with the system: It's reporting function that is based on MS Access and the Java Swing based GUI.

      Saving grace: The original client was UNIX based, so most of admin tasks can be done with a CLI.

  13. cvs - tortoise - jalindi igloo by patazathoth · · Score: 3, Informative

    cvs as the engine, you can install it on windows or on a cheap linux box (I prefer the later).

    tortoise as the gui, it integrates in explorer directly, no need for a seperate program or GUI it is simply intuitive.

    Jalindi Igloo as the dev studio integration. I've use it for a while and it was working as well if not better than VSS.

    I've used vss for 6 years (during my redmond era) and had allright success with it but had to check the integrity of the database and we had to use backup a few time.

    We started using cvs when OSX came out and had nothing but success with it. It has its limitation but it is straight foward and I even think it is Open Source (correct me if I am wrong) so if you don't like something, just change it!

    1. Re:cvs - tortoise - jalindi igloo by Anonymous+Conrad · · Score: 1

      We started using cvs when OSX came out and had nothing but success with it. It has its limitation but it is straight foward and I even think it is Open Source (correct me if I am wrong) so if you don't like something, just change it!

      True, but it's an open-source dinosaur. The code has been so badly hacked over the years that some influential guys decided it needed a huge rewrite and that's subversion. When you get *really* large scale CVS use (like the GCC project) that it uses rcs and file locks becomes quite a pain, and some of the operations had bad O() orders on file count. (There's even duplication of the core code for network client and file repository access.)

      That's not to say that CVS is stable and very usable for small-scale. But if you want to enhance it, give your time to subversion.

  14. PVCS.. by patazathoth · · Score: 1

    I had a chance to use PVCS in the past few months and I was really not impressed. They have a great engine, but the GUI is written in JAVA and is so slow and clunky.

    Now, I am sure that someone somewhere wrote a better GUI (since PVCS expose the API to the engine).

    1. Re:PVCS.. by technik · · Score: 1

      You must be referring to PVCS Dimensions, which is their database-based product (uses Oracle, last I checked). It is good. The original PVCS, which went through many hands but started as PolyView Version Control System, was worse than RCS. In fact it was a steaming pile. It is hard to irreversibly trash a file with RCS just using co/ci but the PVCS gui could do it easily if you had multiple developers working.

    2. Re:PVCS.. by smccto · · Score: 1

      we're kinda stuck with Merant PVCS here since we'rea regulated environment and can't switch very easily. PVCS has proven to be ok, but lacks stable integration with VS.NET, making it harder to use. And the comment above is correct: the GUI is horribly slow even in the smallest projects - even if installed on your local workstation. their tech support staff is about average and typically needs 2 or 3 days to solve your problems. in the past, i've actually used vss quite successfully in small to moderately sized projects with about 10 developers. i've never lost data.

  15. Perforce by jmaslak · · Score: 3, Insightful

    It supports branching (a must if you ever plan on releasing a V2 of anything), which, although CVS claims to, CVS does it very badly.

    It is quick.

    It is EASY from an administration standpoint. Easier then VSS. Other then checking your backups once in a while, you never mess with it. It really is "install and forget".

    It allows the possibility for work to continue despite network problems, although I admit this is a bit ugly.

    It has atomic changelists. Unlike CVS, where each file is submitted independently, all files are submitted and succeed or fail as a group. So an entire feature either gets there or doesn't. This also lets you remove the entire feature with one command, and lets your QA department know exactly what has changed (They can ask the developper who submitted the change, "What does this do?" rather then having to ask that for every file that was part of the change - MUCH less work).

    It is cross-platform, on just about anything you'll need it on (including Linux).

    It even has MS Office integration if you want that.

    It has a valid security model, at least when compared to VSS (which has absolutely no security IMHO - yes, you can set passwords and protections and such, but changing a few bytes in the client will nullify those protections!).

    I can't recommend it highly enough. It isn't cheap, but neither is VSS.

    1. Re:Perforce by digerata · · Score: 1

      We use Perforce, as well, and I also would recommend it. One year ago we looked at every SCM pacakge listed in this topic. The only one that solved all of our issues was Perforce. One other item I would bring up is support. Even before you buy there product they offer it. It is top notch, like no other. 90% of the time I have a reply to email in under 30 minutes. The rest is 1-2 hours. There is also phone support if you prefer. They also just released a beta GUI client for Mac and Linux that just rocks. Its great for us because we develop on Windows, Linux, and Mac at the same time.

      --

      1;
    2. Re:Perforce by yandros · · Score: 2, Interesting

      Node-locked named clients, and the lack of flexibility that goes with them, are a large PITA. Branching is better in Perforce -- IF you're on a fast, secure network connection to the server.

      Remote access security in Perforce was terrible when I used it last (about 3 years ago), but maybe it's better now. Attempting to shoehorn it over ssh produced effects much worse than CVS.

      Running a dedicated SQL server for your VCS is a bit of a pain -- or ours was especially bad in some way, 'cause it needed to be taken down for maintenance WAAAY too often.

      Perforce is a pretty nice VCS for a dedicated group sitting at exactly the same desktops, on a closed/protected net every day. Even better if those desktops all run the same version of Windows. Introduce laptops into the mix and things start to get tricky. Try to add a developer base who migrate between working locations (like `home' and `office') and want to be able to work in both places, and you'll find yourself missing the good old days of CVS.

    3. Re:Perforce by CompVisGuy · · Score: 3, Informative

      I have used Perforce (as a developer, rather than as a respository admin).

      I found Perforce to be an excellent VCS; it integrated very well with our workflow -- once your developers know the basics, the system works very well. As far as I know, it has many advantages over MS's SourceSafe -- try and stay away from the MS stuff if you can.

      There is a Windows GUI for Perforce, and it works well under all UNICES, Windows and others.

      I strongly recommend Perforce. Simple as that.

      Having said that, Perforce isn't free, and CVS is. I currently use CVS and am reasonably happy with it. The TortoiseCVS Windows client makes integrating the use of the VCS into workflow easy. However, CVS does have some problems, and the Subversion project is trying to solve these. I think most people find learning CVS a steeper learning curve than learning Perforce.

      Bottom line: If you can afford Perforce, go with that. If you are prepared to live with CVS's steeper learning curve and problems (these are minor -- CVS is the de facto standard for VCS among the Open Source software movement), or want cost free version control, go with CVS.

      --


      "The noble art of losing face will one day save the human race"---Hans Blix
    4. Re:Perforce by vorwerk · · Score: 1

      I second the Perforce bid, for all of the reasons mentioned.

      I've used it in my job as a software developer at a large organization, and really, really loved it. A few more things worth noting:

      - The atomic change lists are cool, and well worth underlining -- you can very easily back-out an entire change (unlike CVS, which might require you to revert to a previous tag or go and find the affected files, etc.).

      - There are command line tools as well as GUI tools for a huge number of environments. All the clients are freely downloadable off the perforce website -- only the server need be licensed.

      - Branch management is unbelievable. It would take a while to explain fully here (it's best to read the docs), but basically users can create their own virtual branches (which require little to no extra space on the server), modify them separately, and re-integrate back into the mainline or another branch entirely. Very cool stuff. (Users can basically create their own custom "views" and "branches" of the repositority.)

    5. Re:Perforce by vivarin · · Score: 1

      Perforce is the best I've used. CVS is slow, VSS and PCVS both blow. Maybe subversion will be good, but Perforce is just awesome and VERY fast.

    6. Re:Perforce by Quarters · · Score: 1

      Ditto on Perforce. We use it across the company and everyone loves it. The command line tools are excellent, too. I was able, with very little hassle, to intergrate Perforce with 3D Studio Max using nothing but the command line interface and Max's internal scripting language. Now the artists here are checking game assets in and out without even realizing it. The hassle of using a different app just to get at files they want to modify has always been an issue with game artists I've seen. Perforce made it very very easy to get over that hurdle. It gave us digital asset management without the cost of going to a system such as Alienbrain.

    7. Re:Perforce by Anonymous Coward · · Score: 1, Interesting

      Uh, this is to yandros. Your post doesn't have the ring of truth to me...
      That doesn't sound like the Perforce I spec'd and used a few years ago.

      First, our Perforce server was in Toronto,and I had a developer in Vancouver use it with no problems whatever, over broadband and a VPN.

      Second, it was very stable. We were running it as a service on NT and it just would not go down. I run a copy on my dev box at work (NT again) and it never goes down. Its memory footprint is low too. It's not like you're running Oracle... The fact that it has a real database backend does not get in the way. Au contraire...

      I would highly recommend Perforce to just about every situation. However, it would be *really* nice if it allowed read-only replicated databases.
      Are you listening, Perforce?

  16. CVS *does* "bite big donkey dick" by Scott+Wood · · Score: 1
    CVS is tolerable when you just need a place to store your files while retaining a history of changes. However, if your needs go beyond that, its shortcomings become painfully obvious.

    For example, its branching "support" requires you to manually keep track (with tags) of when you branched, so that you have a chance in hell of being able to re-integrate later. Don't even think about just integrating individual changes, either; not only will you not be able to reasonably tag the base for the next integration (unless you like manually specifying the version for every single file), but CVS doesn't even support changesets, so you'll also have to manually figure out what files (and revisions thereof) were part of the change.

    And on top of all the design misfeatures, it's simply buggy, in my experience. Numerous times, I've seen bizarre error messages for which I could find no other explanation (such as one commit I attempted that contained two files, which consistently failed, but succeded when I broke it into two separate commits).

    Fortunately, I don't have to deal with that crap anymore, as I'm now using Perforce. It's certainly not perfect, but at least it doesn't bite big donkey dick.

    1. Re:CVS *does* "bite big donkey dick" by the+eric+conspiracy · · Score: 1

      CVS is tolerable when you just need a place to store your files while retaining a history of changes.

      CVS may be the worst version control software in wide use. However using CVS vs. using no version control system is akin to flying in an airplane vs. being in free fall at 30,000 feet with no parachute.

    2. Re:CVS *does* "bite big donkey dick" by mbogosian · · Score: 1

      CVS may be the worst version control software in wide use.

      Those of you who use and hate CVS may wish to check out SubVersion, a CVS replacement which leverages WebDAV via an Apache module. It can be used locally (i.e., sans server) as well, just like CVS. It's still in beta, but we use it and it's served us a lot better than CVS has. The only problem is some dev tools have (shortsighted) tight integration with one particular VCS or another (like CVS or MSVSS), so using an alternative breaks the "convenience" offered in these tools.

      But I say fuck it. Tight integration is for wussies. Pipes and environment variables are the only integration I need.... ;o)

    3. Re:CVS *does* "bite big donkey dick" by mbogosian · · Score: 2, Informative

      Fortunately, I don't have to deal with that crap anymore, as I'm now using Perforce. It's certainly not perfect, but at least it doesn't bite big donkey dick.

      Perforce is actually a pretty decent product. Personally, I prefer the command line interface, but there are plenty of third-party GUI tools which emulate the P4 windoze client.

      One thing Perforce does seem to have difficulty with (and I'm not sure if this is just the result of user error) is a TRUNK (i.e., HEAD) = PRODUCTION development strategy.

      In other words, your mainline sources always reflect what is (or is about to be) in production (that is, assuming you only release from one branch, like a website or something). To start a new project you branch from the mainline (or another branched project) and when you're ready for alpha testing, you release checkin restrictions on the mainline, merge your changes for the project back into the mainline, fix conflicts, start testing and make any repairs to the mainline. Then when, you're ready to release, you freeze the mainline again, tag it and push it to production.

      I know you're probably asking, "why the hell would you do that?" The answer is that, theoretically if you've got one product you're releasing, but like to work on several different versions concurrently, then this branching strategy makes sense.

      The problem with Perforce (and, again, this could be because of user error) is that it seems to generate unnecessary conflicts when merging back into the mainline. I don't know if this has been made easier in recent releases, but you may wish to make branching and merging a high priority test when evaluating any VCS software.

    4. Re:CVS *does* "bite big donkey dick" by Anonymous Coward · · Score: 0

      SubVersion, a CVS replacement which leverages WebDAV

      Buzzword-tastic!

    5. Re:CVS *does* "bite big donkey dick" by Anonymous Coward · · Score: 0

      No, VSS is the worst source code control system. After using it, CVS, MkS, and ClearCase, it was the worst one of the bunch. MKS would get my vote if they hadn't wrecked their system around version 7; instead, I'd say ClearCase is the best bet.

    6. Re:CVS *does* "bite big donkey dick" by TheTomcat · · Score: 1

      We use this strategy to manage our web applications (with CVS) with one exception. "Alpha" is called staging for us, and we branch for it.. fix anything in the staging branch and back-port it to head when QA is done and the staging has been completed (and pushed to production). This allows us to keep working with head while the QA people are doing their thing.

      We came up with this strategy ourselves, and while we aren't naive enough to think we "invented" the procedure, I didn't realize its use was so wide-spread.

      S

  17. StarTeam is an interesting product by Anonymous Coward · · Score: 1, Informative

    StarTeam is an interesting product.

    I've never actually used it for production, but several years ago I did some evaluation of different source control systems, and stumbled upon it. It's not free, and it's relatively expensive compared to cheaper solutions such as VSS and Perforce, but they've got one of the coolest feature sets of any revision control system I've seen.

    For example, one thing that I thought was especially cool about it was that you could actually have the bug system link comments to specific revisions of files in the repository. And they actually have an SDK for custom integration, so you can easily integrate it with your own custom tools.

    That being said, CVS works OK if you're doing pretty straightforward stuff. But managing multiple branches on CVS? Ugh!

    1. Re:StarTeam is an interesting product by kalman5 · · Score: 1

      Well, I think that ClearCase is the best, the architecture is Client/Server and it is integrated really well with almost all development environment...

    2. Re:StarTeam is an interesting product by mabinogi · · Score: 1

      StarTeam is a nice idea, but it's executed poorly...

      The interface is an abortion, and it's too flexible, to the point where it puts flexibility above useablilty.

      It lets you do too many things that are just wrong (like changing the default working directory for every folder in the tree individually), and doesn't give you enough ways to lock it down so that those in your team that don't understand how it works can't fuck it up....

      However, it is cross platform (it uses java internally), I'm fairly successfully using it to manage a product that works on Windows / Linux and Solaris. But I experience pain whenever I have to check out someone else's project since it's almost aways set up wrong.

      It also provides a Java and COM C++ APIs, and the Java one seems fairly useable to me. The API provided is the one they use to write all the frontends.

      Personally I think something like Sourceforge, or your own combination of CVS or Subversion and Bugzilla is a better alternative, but it's not broken enough for it to be worth moving off it now that we've got it.

      --
      Advanced users are users too!
  18. Re: Alternatives to Visual Source Safe by MerlynEmrys67 · · Score: 1
    Clear Case is pretty cool... It is just SOOOOO expensive. I have yet to work in a ClearCase environment that didn't have a fulltime "ClearCase" administrator. This is a 60-120K (pick your geographic location) per year cost ABOVE the licencing and server requirements.

    That said, it is pretty cool in that its representation is a filesystem that you mount so that files are automatically kept current. That said, the whole thing is complicated enough that I always used the "administrator" when I needed to do something, vs. just a get/put in a normal VCS system

    --
    I have mod points and I am not afraid to use them
  19. Why aren't they client - server? by MobyDisk · · Score: 1

    So far, I have yet to see a source control system that is client-server. I've used PVCS, CVS, and VSS. They all store their "database" in some proprietary file array. VSS has the craziest scheme I've seen before, while PVCS and CVS seem to have the basic concept of a file is an archive. But really, for all the same reasons as any other database (security, performance, backup, transactions, ...) it should be client-server.

    Is this not done for historical reasons, or technical ones?

    1. Re:Why aren't they client - server? by Anonymous Coward · · Score: 0

      Why not peer2peer alal BitKeeper? And yes, its files are maintained via industry-standard SCCS structures.

    2. Re:Why aren't they client - server? by aminorex · · Score: 1

      CVS is client-server.

      Filesystems are databases.

      CVS has filesystem security, performance and backup
      characteristics, and uses locks to insure
      consistent commits.

      --
      -I like my women like I like my tea: green-
    3. Re:Why aren't they client - server? by vivarin · · Score: 2, Informative

      Both Perforce and Subversion are client-server. Perforce is excellent -- I haven't used Subversion.

    4. Re:Why aren't they client - server? by psykocrime · · Score: 1

      Wouldn't CVS be considered "Sorta-Kinda" client-server? Correct me if I'm wrong, but I thought all the networking stuff for CVS was basically a hacked together add-on to what is basically a non client-server application. After all, wasn't CVS originally just a bunch of scripts for running RCS commands?

      --
      // TODO: Insert Cool Sig
    5. Re:Why aren't they client - server? by aminorex · · Score: 1

      There's a client, there's a server. Voila, client-server.

      But yes, CVS is constructed by the chewing-gum
      and rat-hair method. Fortunately for us, it has
      about 12 years of practical shake-out, and it's
      about as robust a piece of software as exists on
      the planet, ugliness notwithstanding.

      --
      -I like my women like I like my tea: green-
  20. Free-as-in-beer for open source work by smileyy · · Score: 2, Informative

    Perforce is free-as-in-beer for the development of software that is licensed exclusively under an Open Source license.

    http://www.perforce.com/perforce/price.html

    --
    pooptruck
  21. There are many... use google? by sheldon · · Score: 1

    Perforce
    Starbase (now a Borland product)
    Clearcase
    PVCS

    and on and on and on and on

    I've heard the most positive feedback concerning Perforce and Starbase.

    1. Re:There are many... use google? by Anonymous Coward · · Score: 0

      'Use google'?

      Looks to me like he *has* used google to get that alternatives list (which is way more comprehensive and useful than yours). Did you actually follow the link?

      He wants war-stories and opinions from people who've actually migrated.

    2. Re:There are many... use google? by sheldon · · Score: 1

      "Did you actually follow the link?"

      Did you? The link is a SourceSafe bashing site.

    3. Re:There are many... use google? by jeff67 · · Score: 1

      FWIW, perforce has whitepapers here that compare Perforce against VSS, ClearCase, CVS, and PVCS. Obviously, they are slanted, but they might be worth looking at anyway.

    4. Re:There are many... use google? by ces · · Score: 1

      Did you? The link is a SourceSafe bashing site.


      And source safe deserves most if not all of the bashing. It is actually LESS suited for large muti-developer projects than not using a source control system at all.

      --
      Happy Fun Ball is for external use only.
  22. Disappointing ... by Anonymous Coward · · Score: 0

    Come on people, this question is just begging for one of the "use Google" whiners to pop their heads up. Where is the "Well, duh, Ask Slashdot used to be so cool but it should now be renamed Ask Google" comments from the people who post a completely un-helpful link to a Google query such as "visual sourcesafe alternatives?"

    1. Re:Disappointing ... by Anonymous+Conrad · · Score: 1

      Come on people, this question is just begging for one of the "use Google" whiners to pop their heads up. Where is the "Well, duh, Ask Slashdot used to be so cool but it should now be renamed Ask Google" comments from the people who post a completely un-helpful link to a Google query such as "visual sourcesafe alternatives?"

      Hell, who needs the use-google-whiners when we've got the use-google-whiner-whiners like you?
      :-p

    2. Re:Disappointing ... by Anonymous Coward · · Score: 0

      shut up, you use-google-whiner-whiner-whiner...

  23. CVS and others by Anonymous Coward · · Score: 0

    About a thousand years ago (ok, maybe 9 years ago) I did an analysis of Windows source control products.

    At the time, we looked at PVCS, SourceSafe (very new at the time), MKS's RCS implementation, CCC Harvest, Endeavor/PC, and who knows what else.

    At the time, some of these things were big bucks. And, in general, they weren't that great. I seem to recall Harvest going for $3000 a developer seat. Shocking!

    Anywho, 10 years later, and I'm fully committed to CVS. It's not the prettiest, and it's far from perfect. But:

    1. It works well for me and my development group
    2. Lots of people know how to use it, inside & out
    3. It's free
    4. It has lots of add-ons.

    But again, there's room for improvement. Maybe the subversion folks will bring it all home.

  24. Not exactly a "major money-maker" by leonbrooks · · Score: 2, Informative

    As I understand it, they're having a hard time selling the SF code, and to add insult to injury at least one of the original developers also have a Free competitor up.

    --
    Got time? Spend some of it coding or testing
  25. Oh, I don't know... by leonbrooks · · Score: 1

    I know someone who ran a 3-line dialup BBS under Windows 95 and used it as a workstation as well.

    He only had to reboot it about every mealtime. Eventually switched to OS/2 when it became clear that this was going to be a non-flyer. But it did work. Kinda. Mostly. Reminds me in so many ways of many mission-critical Excel spreadsheets which is an oxymoron in principle but actually happens IRL. Some complete bananas-for-brains do that kind of thing and don't even keep backups. Aiyaiyai...!

    --
    Got time? Spend some of it coding or testing
  26. Easter Bunny, Dead at 55 by Anonymous Coward · · Score: 0

    I just saw some sad news on CNN - popular childrens' figure Easter Bunny was found dead on a Georgia road this evening. There weren't any more details. I'm sure everyone in the Slashdot community will miss him - even if you didn't enjoy his work, there's no denying his contributions to popular culture. Truly an American icon.

  27. Alternatives to VSS by wrero · · Score: 3, Insightful

    PVCS - My software company migrated from MS VSS to PVCS, it works much better - but - at least for our relatively large project, it's kind of slow. We've been using it for about a year and it's worked well.
    Clearcase - Rumored to be "THE version control system", I've heard it is complicated to setup and use, but Rational Clearcase is supposed to be the end all of version control systems. Checking out the link before posting, it seems that Rational software is now owned by IBM?
    Starteam - I evaluated this product a while ago (18-24 months or so ago). It seems that this company has been purchased by Borland. But at any rate, Starteam seemed to be a very comprehensive version control system. We didn't choose Starteam - as many of our developers had already had PVCS experience and at the time Starteam was the new-kid-on-the-block and we didn't want to fight with a new product. We already had enough headaches with MS VSS, we wanted something we knew for certain would be tried and true. That being said, Starteam did look great.
    Last but not least, CVS the open source version control system. I've used it a few times, but never set it up or configured it and can't really comment on reliability, etc. I'll assume it's great - I'm know others have mentioned CVS and I'll leave the people that have used it to give you more information.

  28. your timeframe? by biehl · · Score: 1

    I personally like CVS very much. But I think that I am going to like Subversion
    Subversion
    even more, in a few versions time. If you can wait a bit more than that you might want to look at an IBM research project called Stellation Version Control
    Stellation

    CVS is quite nicely integrated in that super IDE, Eclipse. And the two others have integration underway.

  29. ASK SHILL-DOT by Anonymous Coward · · Score: 0

    Look at perforce or bitkeeper.

  30. CVS, Jalandi Igloo... by Lao-Tzu · · Score: 1

    I hate VSS with a passion. We've been using it as our Source Control system for many many years where I work. Lately, we get corrupt databases about every week or so. How does it happen? Usually people are connecting to VSS from home through a VPN, and the tunnel breaks in the middle of a checkin to the database. Since VSS's database is managed by the client, if it fails halfway through it is easy for the database to get corrupted. Additionally, the entire VSS database is writable for our entire development staff, hence no access control at all.

    It is easy to fix a lightly corrupted VSS database with their dumb tool. Who the hell wants to do that, though?

    So once upon a time, the database got corrupted and wouldn't magically fix. A couple of us showed off CVS to our manager and convinced him, eventually, to give CVS a try. We had it integrated on every developer's box through Jalandi Igloo, and moved all the projects over to a CVS server.

    The experiment failed, and we're back on VSS now. Why did it fail? The developers found that Jalandi Igloo was about an order of magnitude slower than VSS's visual studio integration. Personally, I didn't have any problem with it. Occasionally Igloo would hang for a few minutes during a simple operation like a commit or a get. It was a pain, I'll admit, but we got many things out of it: A source control database that was text based and easily correctable, a source control system with sane branching, and the happiness of moving away from VSS. But the developers complained, some of them saying that utter frustration at CVS' speed was causing them to loose 100% of their productive time because they were so frustrated. [What dicks, eh? How can a slow source control system keep you from coding at all?] Others complained of more realistic productive time losses.

    Anyways, we're back on VSS now. So now, when I go to edit a file that isn't checked out, sometimes it takes 5 minutes to check it out through visual studio. It just depends on who else is accessing the database at that moment, and how it gets locked. *le sigh*.

    On a related note, I highly recommend Subversion as a source control system rather than CVS these days. The Subversion website could really use some work on becoming focused towards people who are interested in the software, rather than their developing of it, though. But I don't know of any visual studio integration worth mentioning, yet.

  31. I wonder why MS bought Source Safe from One Tree by gatkinso · · Score: 1

    ...as opposed to another (read: better) product.

    Whatever.

    It is great to see MS bashers bash VSS thinking they are bashing MS code.

    --
    I am very small, utmostly microscopic.
  32. My team is a Windows VSS-CVS switcher by catscan2000 · · Score: 2, Informative

    I was checking in source code in VSS, and it was like "bleep, bleep, bleep, bleep, bleep!" And then, like, half of my repository was gone. It was a really good repository. I had to code it again twice as fast so it wasn't as good. It's kind of.... a bummer.

    Anyway, our VSS never crashed after using it for about 5 years, but ever since I was hired three years ago, I advocated for CVS. I learned a lot in how to initiate change processes, and after about a year, I put together a document comparing the feature sets of VSS to CVS. JBuilder integration with CVS was a nice feature, since that's what we use, It was CVS's excellent branch management capabilities that ultimately drove us away from VSS, since we were starting to need to do branching on stable releases during the next version's development cycles. VSS sort-of does branching, but very poorly. I had to document WinCVS 1.2 myself for the development team, but since the switch, our revision control management has been substantially more useful, and now we have a sense that it's working for us rather than working for it like with VSS.

    We didn't need any BSD or Linux boxes. We use CVSNT at http://www.cvsnt.org and it works like a charm :-). It runs as an NT service, and we're currently running it in pserver mode. It supports NT authentication, but my development team is spread across several domains since it's a multi-organization development effort. In your case, NT authentication probably works, or if you're using ActiveDirectory, it supports kerberos and other stuff, too :-).

    We're going to set up the ViewCVS web interface soon so that we can get server-side views of our repository. The TortoiseCVS (sp?) Explorer integration is very nice, too, so you can see what files are modified and such right in the Explorer.

    For us, CVSNT, WinCVS 1.2, and TortoiseCVS works very well :-), and it's all on Windows.

    1. Re:My team is a Windows VSS-CVS switcher by catscan2000 · · Score: 1

      By the way, you don't need to leave your previous VSS history behind! We used Perl scripts that we found through Google that convert VSS histories into CVS, comments, dates, and all :-) (and whether or not it's a binary file). The catch is that it's best to not use linked files, since they will appear as two separate files in CVS. On a UNIX-based box, you can do symlinks, I suppose, but with CVSNT, it's not easy if it's possible at all. The Perl scripts even converted the times to GMT, which is what CVS uses in its server files. I wish I had a link, but I have to get ready for work now..

  33. ClearCase by FortKnox · · Score: 1

    If you can float the cost of Rational's ClearCase, as in, money is no issue, then ClearCase is, by far, the best source control system. It fully supports parallel development, has a great merger, and just makes life simple for all developers once they learn the system.

    I recommend ClearCase to any shop that has the cash to purchase it (and, yes, it is worth the price, but the price is VERY VERY high).

    --
    Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
  34. Clearcase by JamMasterJGorilla · · Score: 1

    This is the real man's version control system... if I could only count the number of developers that wish they had Clearcase at their current jobs after having worked with it at a prior job.

  35. Why SourceSafe is bad software by ChaosDiscord · · Score: 1
    The original poster hints at the the problems with Microsoft Visual SourceSafe, but if anyone doesn't know, I've written up a page on why Microsoft Visual SourceSafe is unsuitable for real world use. (Yeah, I've been pimping it in my sig for a while, but it's just so on topic....)

    What to replace it with? At home and at work I use CVS. Sure, CVS has lots of problems, but at least they're well known problems with easy workarounds. At its core CVS is solid, if dated, software. There are other products I've heard good things about other packages, but I lack the experience with them to judge them. What I do know is that CVS is far and away superior to SourceSafe.

  36. StarTeam is fantastic on Windows by qodfathr · · Score: 1

    I don't think you'll do any better than StarTeam (now sold via Borland). What is particularly good about StarTeam is that is was born and grew up on Windows, with Unix ports coming later. It feels and acts (for the most part) like a Windows application should -- which can hardly be said about creatures such as ClearCase and MKS.

    There is a nice API to extend it to do new, nifty things. It has bug tracking. It has threaded discussion (which can be associated with items in the repository). You can reach it with a rich Win32 interface, with a web interface, with a java client, with the command line, etc. It can even tie into Explorer so that the entire repository can be mounted as a drive letter.

    Visual Studio integration is rock solid and acts just like a VSS person would expect (minus the VSS bugs) -- which I cannot say about Jalindi Igloo (you get what you pay for). There are also intergrations for a number of other tools.

    When they were their own company (StarBase), support was fantastic. I dunno if that changed under Borland. Also, in the StarBase days, they really did listen to users. If you made a reasonable case for a new feature, it usually made it into a future release.

    On the Free and free side of the world, CVS on Windows using, say, cvsnt and WinCVS is not a bad combination, but once you've had a taste of a great tool like StarTeam, cvs leaves a LOT to be desired.

    Right now, I am personally using cvsnt + WinCVS as budgets are tight, but StarTeam is on my short list of future capital expenditures.

    --
    Yes, it's true. This man has no dick.
  37. Pontiac by yerricde · · Score: 1

    I'm confused. I thought Firebird was a browser? How can two unrelated products have the same name? ;>)

    I'm confused. I thought Firebird was a car? How can two unrelated products have the same name? ;>)

    --
    Will I retire or break 10K?
  38. cygwin provides ssh support in windows by pato+perez · · Score: 1

    If you need to run cvs on Windows but need better security than pserver (which, like telnet, sends passwords in cleartext) you might look into Cygwin, which provides (essentially) a unix emulation layer for windows that includes cvs with ssh support.

    Just make sure when you download Cygwin to download cvs, cygrunsrv and openssh 'cause you need them and you don't get them with the default core cygwin download.

    Setting up is a little trickier than CVSNT, but you can find good instructions on ibm's developerWorks website.