Tag
The author warns that AI-generated pull requests and AI-driven security reports create externalities for open-source projects: a frontier AI lab's rigid 90-day disclosure policy, combined with a surge of mostly invalid reports, nearly forced Apache Spark maintainers to choose between shipping with an unpatched known issue or letting the lab disclose publicly without a fix.
Open source maintainers are experiencing a surge in AI-generated contributions from individuals using AI tools to enhance their GitHub profiles for employment, raising issues about the quality and intent of these submissions.