this post was submitted on 27 Jun 2026
102 points (87.5% liked)
Programming
27640 readers
196 users here now
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Rules
- Follow the programming.dev instance rules
- Keep content related to programming in some way
- If you're posting long videos try to add in some form of tldr for those who don't want to watch videos
Wormhole
Follow the wormhole through a path of communities !webdev@programming.dev
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
is this vibe-coded
Definitely
If the project itself is vibe coded, the author is doing a good job of hiding it. There's some slight lean towards claude-like speak, ("real behavior" and the way some of the readme sounds) but the commit style and comments and such don't immediately trigger the obvious LLM alarms in my head.
That website is definitely vibe coded though. I've seen enough one-shot websites from LLMs while playing around with them to immediately notice the AI website style lol
First file I clicked on has very claude-speak comments. Actually I was so focused on the writing style I didn't even realize those were em-dashes. Pics on the website are definitely AI gen (warping on the grid lines)
Looks like the author is trying to hide it by stripping Claude off of the commits and having no CLAUDE/AGENTS.md. Says its a fork of localstack but repo layout seems to differ, and that did have an AGENTS.md
Ah ha! Yep, I didn't see any of the big long form comments like that one, good catch. I scrolled through some of the commits and apparently got unlucky.
I am surprised that someone comes to share an open-source project and Nate's first reflex is "let me go look for traces of AI in what was generated". That impresses me.
You know Nate, I could have just let this comment fade out, but I am not going to. Let me tell you why.
When someone shows me a product, here is how I react, as a developer and incidentally as a human being:
That is how I would have reacted. We are all different, and that is a good thing for humanity. Difference is richness.
@Nate, whether the code is entirely generated by Claude, GPT, Gemini, Cursor or anything else, I want to tell you that it is none of your business, unless you have something against AI itself, in which case you could have said so clearly or just kept scrolling. The site has plenty of other topics where you can leave comments that will satisfy you.
Me, I am just a simple Developer (with a capital D anyway) who shares projects that nobody is forced to use. You can criticize them on the substance, on the form, but not on the way they were developed, because you do not know how they were developed, and do not forget that the important thing is the result. As for the means, I can reassure you, they are decent. I did not kill anyone along the way.
This reminds me of the unjustified pile-on against people who try to share things, but who get blamed for using AI in 2026.
Thanks Nate for your sharp eye and your constructive criticism.
Here’s the thing dude. There is no “none of your business” anymore. If an Israeli hacker group wrote the software, clearly it’s a bad idea to use it. Either don’t publish it, or state how it’s made.
People don’t want to support unethical behavior. Trying to hide it is even more unethical so of course people are going to analyze everything you’ve done.
Don’t announce the project if you don’t want it analyzed.
that's an awfully high horse you're up on, son
Filing all of this under “maintainer is a freak” and moving on.
have vibe-coders proven to be maintaining yet?
traxex, the only contribution in your comment is the word "freak". Moving on with you.
Simultaneously proud and embarrassed to use AI.
Strange.
You could have just said, "yes I used AI"
Your second check is exactly why someone would check if it’s AI-generated.
Let’s review some basic security: the CIA triad stands for Confidentiality, Integrity, and Availability. Confidentiality is never a guarantee with AI-generated systems because the developers are usually spending even less time thinking about the code than normal since AI does the thinking. Plus AI systems are getting owned left and right (litellm anyone?). Integrity is never a guarantee because the developers don’t understand the system the AI slopped together and AI is only good at unit tests in some cases, not integration or end-to-end. That requires a system perspective. Finally, availability is usually worse with AI slop because AI is trained on really bad software that is rarely optimized. That requires vertical scaling out of the box.
Looking at this codebase, the integration cover hits three services and not totally at that. There are no security tests. There are no published security findings. There are no security standards in the contribution guidelines. While there is a disclosure process, there are no automated baseline tests available.
So why exactly did you move beyond your second check? This project has no security. Remember, that’s your guideline even before constructive criticism.
Edit: I just realized you’re the maintainer and you’re yelling at someone for asking about AI stuff when you can’t be bothered to do basic security. Worse yet, you’ve attempted to hide your slop instead of making users aware of the extra security issues. You have to understand I wouldn’t have commented on this if you hadn’t included a basic check you went out of your way to screw up. Glass houses and all that.
Lmao I use AI coding for work dude, not that I particularly enjoy it, but I'm required to.
This project does not solve any problems I have, and someone else asked if it was AI generated. Since I've seen a ton of AI output I've gotten a bit of an eye to look out for telltale signs. Sure enough, the first file I clicked into had these signs. You open sourced this code and shared it to others, it is absolutely my business on how it was developed
You seem to have tried to hide any references to your use of AI, which I feel is quite disingenuous. I do use projects that have had some AI contributions, notably Home Assistant and Dawarich, both of which inform me before deployment.
Hiding this is immediately a security and privacy issue to me, so if it did solve a problem of mine, it would've been subject to significantly more scrutiny.
If you're going to use AI, just disclose its use. Others can be the judge of whether they want to engage with it or not