I actually think GenAI will create MORE open source code and as long as devs use quality controls like TDD and SonarQube the code will evolve into reusable works.

▲

jandrewrogers an hour ago | parent | next [-]

SonarQube is pretty useless for quality control unless your process is already broken, in which case you should probably fix your process.

I once worked at a company where the powers-that-be decided to add SonarQube with max settings to the pipeline for a large C++ code base. It produced no output so IT thought the install was broken. They eventually figured out that it was actually working perfectly but that it never found any issues across the entire code base ever. We got that for free with sensible build configurations long before it got to SonarQube.

TDD and tools are not a substitute for competent process. I’ve seen plenty of TDD produce objectively poor quality code bases.

▲

kristopolous 3 hours ago | parent | prev [-]

I've never heard of sonarqube ... this looks very enterprisey ... isn't this just prompt engineering over the source with a harness? Why am I clicking through all this signup flow?

I'd buy the put this in your ".git/hooks" workflow ... but I don't know what's going on with this thing.

The strongest opensource contributors tend to be kinda weird - like they don't have a google account and use some kind of libre phone os that you've never heard of.

What a "real" solution would look like is some kind of "guardrails" format where they can use an lsp or treesitter to give dos and donts and then have a secondary auditing llm punt the code back.

There may be tools (coderabbit?) that do this ... but that's realistically what the solution will be - local llms, self-orchestrated.

▲

ChicagoDave 2 hours ago | parent [-]

SonarQube does static analysis and let's you set your own levels. Yes, enterprises use it for code and test quality as well as security checks.

I was just saying that good engineers can guide GenAI into creating good code bases. Seeing I got voted down, not everyone agrees.

	▲	kristopolous 2 hours ago \| parent [-]
		eh, it sounds like you're hawking your own product. It doesn't look like you are and this looks to be a mass adopted fortune-100 product without large brand name awareness, but that's the risk with hn. There's a lot of people trying to hustle their stuff on here. Strongly frowned upon unless it's genuinely free and even then... Maybe something like "at work we use something called sonarqube and I've been using it on my own stuff. it's works really nice" might have been better