[sobiolite]

Won’t this be solved fairly soon when package managers have automatic scanning of updates by AIs that are superhumanly good at spotting malicious code?

[root_axis]

Not sure if this is sarcastic, but this is a terrible idea. Best case scenario, it relaxes human vigilance and turns the success of malicious code attacks into a dice roll. More likely is that obfuscation techniques designed to fool LLMs will open the flood gates for malicious code.

[warrenm]

Define "malicious code"

Now define "unintended side effect"

Now add "no one is maintaining it anymore"[0]

-------

[0] https://xkcd.com/2347/