Godot Engine formally banned AI-generated code from its open-source project on June 30, citing maintainer burnout and the inability of AI-reliant contributors to fix their own code. The policy prohibi…
Curl maintainer Daniel Stenberg, who has triaged over 1,000 vulnerability reports, published a field guide on how to report vulnerabilities effectively. The guide emphasizes making reports easy for ma…
A developer created a tool called Forever Components Inspo that fetches a manifest of UI components from an infinite canvas site, ranks them semantically against user prompts, and retrieves their sour…
In the age of AI, software quality hinges on taste, not tooling or budget, argues a developer. Taste, defined as understanding made small, separates elegant, user-respecting software from slop produce…
An open-source maintainer rejected a three-line Go patch fixing a ProtonMail authentication bug in the hydroxide bridge, citing it as 'AI slop.' The author, who used a language model for codebase expl…
A new approach to cybersecurity evaluations proposes using language models as constant red-team oracles to empirically compare the attack surfaces of different software implementations, such as OpenSS…
The Linux Foundation and 19 industry partners launched Akrites, an open source security coalition, on June 25, 2026, to address the surge in AI-discovered vulnerabilities that overwhelm maintainers. T…
The National Academies of Sciences, Engineering, and Medicine published a report on AI for cybersecurity that cites Anthropic's Mythos model as capable of finding 83.1% of vulnerabilities in CyberGym,…
AI-generated code is flooding GitHub and degrading codebases, with research showing AI-written code has 1.7 times more critical issues and 45% ships with OWASP Top 10 vulnerabilities. Major projects l…
AI security firm AISLE discovered six new CVEs in curl, including the oldest latent bug in the project's history, and previously found all 12 zero-day vulnerabilities in OpenSSL's latest security rele…
Anthropic's Mythos AI security tool, touted as too dangerous to release, found only one low-severity vulnerability in the heavily audited curl codebase after a privileged deployment. The curl project …
GitHub has 630 million repositories, with nearly half of all new code written by AI, but developer trust in AI code dropped from 77% to 60%. Carnegie Mellon University found 6 million fake stars, and …
PageToMD, a new CLI tool, converts web pages into clean Markdown optimized for AI agents, featuring NFC-normalized UTF-8 output, YAML frontmatter with metadata, and optional JavaScript rendering for S…
The open-source curl project announced it will not process security vulnerabilities during July, drawing criticism from users who note billions of devices rely on the software daily. Critics argue tha…
A developer building autonomous AI workers for a freelance platform documented five costly automation mistakes, including a worker that ran 923 times with zero successful applications due to automatin…
Curl will not accept vulnerability reports for the entire month of July 2026, a move maintainer Daniel Stenberg calls the "curl summer of bliss." The blackout follows a year of AI-generated fake secur…
Check is a new command-line tool that lets users prefix any command with 'check' to deterministically verify whether it will run successfully before execution, returning an exit code 0 or 1. The tool …
Google's internal AI-based security scanning has discovered 17 bugs in Perfetto's trace processor over 10 weeks, a project that previously received little security attention. The bugs are high-quality…
A podcaster transcribed ten hours of old interviews using open-source AI tools WhisperX and pyannote.audio, running entirely on a local laptop with no cloud costs. The process demonstrates how far spe…
OpenClaw, an open-source AI agent project, has significantly hardened its security after receiving 1,309 security advisories since January 10, with 87% of critical reports found to be invalid. The pro…