Remix.run Logo
frevib 2 hours ago

Great effort, thanks for that.

But do we still trust the open source software that is created now everything is vibe coded?

Recently there was a thread about Chatto [1], a Slack replacement completely vibe coded by one person. It works and looks nice. But looking at the code, I wouldn’t trust any of my personal information to it. It’s just tousands of lines of skills and vague instructions. It seems that trust in OSS is eroding and big SaaS might win here because they have the reputation.

[1] https://github.com/chattocorp/chatto

xaitv an hour ago | parent | next [-]

I judge it on a case-by-case basis by just looking at a few recent commits and the feel of clicking a few files in the repo. For OpenLogi I get the wrong type of vibe code vibes and at the very least that means the project might become an unmaintainable mess in a year and that means I don't want to come to rely on it. At worst it means security vulnerabilities.

That being said: I wouldn't really trust SaaS to not be vibe-coded either. The only difference there is that SaaS likely has a financial incentive to stay maintainable so you could argue that helps.

miguelbemartin an hour ago | parent | prev | next [-]

I believe it varies; since it's merely a productivity tool, why not use it? However, if it's essential software that your business relies on, probably not.

ruuda 2 hours ago | parent | prev | next [-]

What makes you think big SaaS is not vibecoded?

maybewhenthesun an hour ago | parent | next [-]

What makes you think we trust big SaaS :-P

whstl an hour ago | parent | prev [-]

Good point, but big SaaS is more often than not running on their own servers, it’s not local and certainly not a driver/driver-adjacent, which has more privileges than anything else.

realharo an hour ago | parent | prev | next [-]

On the other hand, it's also much less effort to do at least some rudimentary review.

Or make a fork with only the minimim set of parts that your agent cherry picks.

make_it_sure 2 hours ago | parent | prev | next [-]

write code by hand then

m00dy 10 minutes ago | parent | prev | next [-]

great effort ? bro just sniff the traffic and feed into Claude.

zmmmmm an hour ago | parent | prev | next [-]

> But do we still trust the open source software that is created now everything is vibe coded?

I guess my question is, why would you trust it when it is not vibe coded?

My suggestion is, have an AI review the code for you.

movedx 2 hours ago | parent | prev [-]

Code is simply math. It either works or it does not. Does your calculator work? Then use it. Does your AI agent of choice produce code that works? Then use it.

Or don't. It's up to you. You're as free to walk away as you are to embrace what's been made here.

dgellow an hour ago | parent | next [-]

Math isn’t known to rm -rf your drive or exfiltrate your private keys and secrets

whstl an hour ago | parent | prev | next [-]

This is dangerous advice on so many levels.

“Is math” and “Either works or not” is only true with formal specifications and formal verification, which dwarfs the cost of producing said software.

_under_scores_ an hour ago | parent | prev | next [-]

This is a bit of an uncharitable take. "It either works or it does not" is an oversimplification when you consider that code often doesn't work in the way it was intended - that's what bugs are. Are vibe coded apps inherently more buggy? Not necessarily. But the I'd argue there's more surface in a vibe coded app that requires blind trust.

Citizen_Lame 2 hours ago | parent | prev [-]

Not really, something can work and be full of security holes.