I think that even worse is that AI might choose just to write something, and skip using a library that is well maintained

▲

acomjean 5 hours ago | parent | next [-]

Or use an out of date library.

In our somewhat “developer assisted” AI development it planned to use a library. We looked the library up and the GitHub page indicated it was “no longer maintained use other library Z”. When told AI agreed and compared the original to the new library (helpful), but it seemed to heavily weight GitHub stars more than active development.

	▲	pixl97 5 hours ago \| parent \| next [-]
		Tools like SCA and SBOM are still needed to ensure your stuff isn't out of date. That's not exactly a problem an LLM solves.
	▲	LtWorf 5 hours ago \| parent \| prev [-]
		When a project talks about how many stars they have, I immediately mistrust them. Usually download counters and stars are signals for VC, which indirectly serve also as negative signals to me.

▲

nine_k 5 hours ago | parent | prev | next [-]

This is where a human with a discerning taste and wide knowledge of the field should notice it during a review, or at least instruct their agents to check for that. If such a human is still employed in this capacity, of course.

▲

cassonmars 5 hours ago | parent | prev [-]

that can sometimes be a plus considering how dependencies used by a lot of projects are themselves targets