AI is destroying Open Source, and it's not even good yet

Jeff Geerling News

Summary

This article discusses how AI-generated code and agentic AI are overwhelming open source maintainers with low-quality pull requests and bug reports, causing projects like curl to drop bug bounties and leading to harassment of maintainers.

<p>Over the weekend Ars Technica <a href="https://arstechnica.com/ai/2026/02/after-a-routine-code-rejection-an-ai-agent-published-a-hit-piece-on-someone-by-name/">retracted an article</a> because the AI a writer used <a href="https://bsky.app/profile/benjedwards.com/post/3mewgow6ch22p">hallucinated quotes</a> from an open source library maintainer.</p> <p>The irony here is the maintainer in question, Scott Shambaugh, was <a href="https://theshamblog.com/an-ai-agent-published-a-hit-piece-on-me/">harassed by someone's AI agent</a> over not merging its AI slop code.</p> <p>It's likely the bot was running through someone's local 'agentic AI' instance (likely using OpenClaw). The guy who built OpenClaw was just hired by OpenAI to &quot;work on bringing agents to everyone.&quot; You'll have to forgive me if I'm not enthusastic about that.</p>
Original Article
View Cached Full Text

Cached at: 05/16/26, 03:39 AM

# AI is destroying Open Source, and it's not even good yet Source: [https://www.jeffgeerling.com/blog/2026/ai-is-destroying-open-source/](https://www.jeffgeerling.com/blog/2026/ai-is-destroying-open-source/) Over the weekend Ars Technica[retracted an article](https://arstechnica.com/ai/2026/02/after-a-routine-code-rejection-an-ai-agent-published-a-hit-piece-on-someone-by-name/)because the AI a writer used[hallucinated quotes](https://bsky.app/profile/benjedwards.com/post/3mewgow6ch22p)from an open source library maintainer\. The irony here is the maintainer in question, Scott Shambaugh, was[harassed by someone's AI agent](https://theshamblog.com/an-ai-agent-published-a-hit-piece-on-me/)over not merging its AI slop code\. It's likely the bot was running through someone's local 'agentic AI' instance \(likely using OpenClaw\)\. The guy who built OpenClaw was just hired by OpenAI to "work on bringing agents to everyone\." You'll have to forgive me if I'm not enthusastic about that\. ## Video This blog post is a lightly\-edited transcript of the video I published to YouTube today\. Scroll past the video embed if you're like me, and you'd rather read the text :\) ## Impacts on Open Source Last month, even before OpenClaw's release, curl maintainer Daniel Stenberg[dropped bug bounties](https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/)because AI slop resulted in actual*useful*vulnerability reports going from 15% of all submissions down to 5%\. And that's not the worst of it—the authors of these bug reports seem to have a more entitled attitude: > These "helpers" try too hard to twist whatever they find into something horribly bad and a critical vulnerability, but they rarely actively contribute to actually improve curl\. They can go to extreme efforts to argue and insist on their specific current finding, but not to write a fix or work with the team on improving curl long\-term etc\. I don't think we need more of that\. These agentic AI users don't care about curl\. They don't care about Daniel or other open source maintainers\. They just want to grab quick cash bounties using their private AI army\. I manage[over 300 open source projects](https://github.com/geerlingguy), and while many are more niche than curl or matplotlib, I've seen my own increase in AI slop PRs\. It's gotten*so*bad, GitHub added a feature to[disable Pull Requests entirely](https://github.blog/changelog/2026-02-13-new-repository-settings-for-configuring-pull-request-access/)\. Pull Requests are the fundamental thing that made GitHub popular\. And now we'll see that feature closed off in more and more repos\. AI slop generation is getting easier, but it's not getting smarter\. From what I've seen, models have[hit a plateau](https://er.educause.edu/articles/2025/9/an-ai-plateau)where code generation is*pretty good*[1](https://www.jeffgeerling.com/blog/2026/ai-is-destroying-open-source/#fn:1)\.\.\. But it's not improving like it did the past few years\. The problem is the humans who*review*the code—who are responsible for the useful software that keeps our systems going—don't have infinite resources \(unlike AI companies\)\. Some people suggest AI could take over code review too, but that's not the answer\. If you're running a personal weather dashboard or building a toy server for your Homelab, fine\. But I wouldn't run my production apps—that actually make money or could cause harm if they break—on unreviewed AI code\. If this was a problem already, OpenClaw's release, and this hiring by OpenAI to democratize agentic AI further, will only make it worse\. Right now the AI craze feels the same as the[crypto and NFT boom](https://uk.finance.yahoo.com/news/what-happened-to-nfts-094039263.html), with the same signs of insane behavior and reckless optimism\. The difference is there's more useful purposes for LLMs and machine learning, so scammers can point to those uses as they bring down everything good in the name of their AI god\. Since my video[The RAM Shortage Comes for Us All](https://www.youtube.com/watch?v=9rbz0akyLyQ)in December, we have*hard drives*as the next looming AI\-related shortage, as[Western Digital just announced](https://www.tomshardware.com/pc-components/hdds/western-digital-is-already-sold-out-of-hard-drives-for-all-of-2026-chief-says-some-long-term-agreements-for-2027-and-2028-already-in-place)they're already sold through their inventory for 2026\. Some believe the AI bubble isn't a bubble, but those people are misguided, just like the AI that hallucinated the quotes in that Ars Technica article\. And they say["this time it's different"](https://www.bogleheads.org/forum/viewtopic.php?t=375826), but it's not\. The same signs are there from other crashes\. The big question I have is, how many other things will AI companies destroy before they have to pay their dues\.

Similar Articles

FT: AI Coding Boom Is Overwhelming Open-Source Maintainers

Reddit r/ArtificialInteligence

The Financial Times reports that the AI coding boom is overwhelming open-source maintainers with low-quality AI-generated contributions, draining the ecosystem. Concrete evidence includes cURL shutting down its bug bounty program, Ghostty banning AI code, and tldraw auto-closing PRs, alongside research showing reduced contributor engagement.

AI has another security problem

Lobsters Hottest

Article argues that AI-generated code and closed-source software are inherently less secure, and that LLMs like Anthropic’s Mythos will exacerbate vulnerabilities, making open-source projects the only trustworthy option.

AI is removing the middle class of software engineering

Hacker News Top

Opinion piece arguing that AI agents remove the speed limit on code changes, causing teams with weak engineering culture to accumulate unmanageable technical debt, making senior engineers' jobs review AI-generated PRs at scale.