Software development
fromTheregister
8 hours agoHot take: AI's not going to kill open source code security
Cal.com has shifted from AGPL-3.0 to a proprietary license, raising concerns about open source security in the AI era.
The following people continue to do amazing things for the Python community: Bill Deegan, El-karece Asiedu, (James) Kanin Kearpimy, Jonas Obrist, Kristen McIntyre, Lucie Anglade, Philippe Gagnon, Sarah Kuchinsky, Simon Charette, Sony Valdez, Stan Ulbrych, and Steve Yonkeu.
Denise Dresser, Chief Revenue Officer at OpenAI, emphasizes the practical applicability. 'Infosys's deep expertise in large-scale software transformation enables enterprises to deploy Codex across areas like legacy code modernization, code review automation, vulnerability detection, and application development.'
Gentoo's official migration from Microsoft-owned GitHub to Codeberg is underway, as the Linux distribution fulfills a pledge to ditch the code shack due to "continuous attempts to force Copilot usage for our repositories." The decision was made public last month, when Gentoo confirmed it intended to migrate repository mirrors and pull request contributions to the new home. On February 16, the organization revealed it now had a presence on Codeberg, where contributions could be submitted.
While AI tools are lowering the barrier to development, the gap between speed and manageability is growing. In just over a year and a half, AI code assistants have grown from an experiment to an integral part of modern development environments. They are driving strong productivity growth, but organizations are not keeping up with the associated security and governance issues.
That mismatch worked, if uncomfortably, when contributing had friction. After all, you had to care enough to reproduce a bug, understand the codebase, and risk looking dumb. But AI agents are obliterating that friction (and have no problem with looking dumb). Even Mitchell Hashimoto, the founder of HashiCorp, is now considering closing external PRs to his open source projects, not because he's losing faith in open source, but because he's drowning in "slop PRs" generated by large language models and their AI agent henchmen.