3 ms·
For the purpose of disclosure, it should say “Warning: AI generated code” in the commit message, not an advertisement for a specific product. You would never ac
by tehsauce 6mo ago
For the purpose of disclosure, it should say “Warning: AI generated code” in the commit message, not an advertisement for a specific product. You would never accept any of your other tools injecting themselves into a commit message like that.
- lazyasciiart 6mo agoMy last commit is literally authored by dependabot.
- sysguest 6mo agowell you know 100% know what dependabot does
- datsci_est_2015 6mo agoLeaves you open to vulnerabilities in overnight builds of NPM packages that increasingly happen due to LLM slop?
- __float 6mo agoYou can set a minimum age for packages (https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown- https://docs.github.com/en/code-security/reference/supply-ch...), though that's not perfect (and becomes less effective if everyone uses it).
- catlifeonmars 6mo ago> becomes less effective if everyone uses it I don’t think that’s necessarily the case. Exposure and discovery aren’t that tightly correlated. Maybe there’s a small effect, but I think it is outweighed by the fact that blast radius and spread is reduced while buying time for discovery.
- galaxyLogic 6mo agoBut how much AI-generated code? If it's just a smallish function or two while most iof the code was written by hand?