this post was submitted on 27 Jun 2026
87 points (90.7% liked)
Programming
27447 readers
213 users here now
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Rules
- Follow the programming.dev instance rules
- Keep content related to programming in some way
- If you're posting long videos try to add in some form of tldr for those who don't want to watch videos
Wormhole
Follow the wormhole through a path of communities !webdev@programming.dev
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
First file I clicked on has very claude-speak comments. Actually I was so focused on the writing style I didn't even realize those were em-dashes. Pics on the website are definitely AI gen (warping on the grid lines)
Looks like the author is trying to hide it by stripping Claude off of the commits and having no CLAUDE/AGENTS.md. Says its a fork of localstack but repo layout seems to differ, and that did have an AGENTS.md
Ah ha! Yep, I didn't see any of the big long form comments like that one, good catch. I scrolled through some of the commits and apparently got unlucky.
I am surprised that someone comes to share an open-source project and Nate's first reflex is "let me go look for traces of AI in what was generated". That impresses me.
You know Nate, I could have just let this comment fade out, but I am not going to. Let me tell you why.
When someone shows me a product, here is how I react, as a developer and incidentally as a human being:
That is how I would have reacted. We are all different, and that is a good thing for humanity. Difference is richness.
@Nate, whether the code is entirely generated by Claude, GPT, Gemini, Cursor or anything else, I want to tell you that it is none of your business, unless you have something against AI itself, in which case you could have said so clearly or just kept scrolling. The site has plenty of other topics where you can leave comments that will satisfy you.
Me, I am just a simple Developer (with a capital D anyway) who shares projects that nobody is forced to use. You can criticize them on the substance, on the form, but not on the way they were developed, because you do not know how they were developed, and do not forget that the important thing is the result. As for the means, I can reassure you, they are decent. I did not kill anyone along the way.
This reminds me of the unjustified pile-on against people who try to share things, but who get blamed for using AI in 2026.
Thanks Nate for your sharp eye and your constructive criticism.
Your second check is exactly why someone would check if it’s AI-generated.
Let’s review some basic security: the CIA triad stands for Confidentiality, Integrity, and Availability. Confidentiality is never a guarantee with AI-generated systems because the developers are usually spending even less time thinking about the code than normal since AI does the thinking. Plus AI systems are getting owned left and right (litellm anyone?). Integrity is never a guarantee because the developers don’t understand the system the AI slopped together and AI is only good at unit tests in some cases, not integration or end-to-end. That requires a system perspective. Finally, availability is usually worse with AI slop because AI is trained on really bad software that is rarely optimized. That requires vertical scaling out of the box.
Looking at this codebase, the integration cover hits three services and not totally at that. There are no security tests. There are no published security findings. There are no security standards in the contribution guidelines. While there is a disclosure process, there are no automated baseline tests available.
So why exactly did you move beyond your second check? This project has no security. Remember, that’s your guideline even before constructive criticism.
Edit: I just realized you’re the maintainer and you’re yelling at someone for asking about AI stuff when you can’t be bothered to do basic security. Worse yet, you’ve attempted to hide your slop instead of making users aware of the extra security issues. You have to understand I wouldn’t have commented on this if you hadn’t included a basic check you went out of your way to screw up. Glass houses and all that.
Filing all of this under “maintainer is a freak” and moving on.
traxex, the only contribution in your comment is the word "freak". Moving on with you.
Simultaneously proud and embarrassed to use AI.
Strange.
You could have just said, "yes I used AI"
that's an awfully high horse you're up on, son
Here’s the thing dude. There is no “none of your business” anymore. If an Israeli hacker group wrote the software, clearly it’s a bad idea to use it. Either don’t publish it, or state how it’s made.
People don’t want to support unethical behavior. Trying to hide it is even more unethical so of course people are going to analyze everything you’ve done.
Don’t announce the project if you don’t want it analyzed.