Most contributors nowadays probably use LLM. And those who don't, often produce code worse than LLM.

If you're not OK with random code, you gotta rewrite everything yourself. So treat their contributions just as inspiration and work from there.

And if you're OK with random code, maybe it's safer to just use LLM and ask it to rewrite the contributed code? At least you know that LLM is not ill-intentioned.

Yeah, that's pretty much exactly what I meant, but you expressed it better.

> At least you know that LLM is not ill-intentioned.

It's more complicated than that, but yeah... I see what you mean here and I agree :-). Probably the LLM is not trained to insert bugs into my repositories, I guess? But anyway, in the future I could totally imagine that some open weight models are "mainstream" and "audited", at which point it sounds harder to target my repo from the LLM than from a PR by a random account.