Re: Looking for advice on how to deal with potential slop packages

Morten Linderud <[email protected]> Sat, 7 Mar 2026 13:36:18 +0100
Newsgroups dev.linux.lists.distributions
Message-ID <aawYbre5_xvhfwKA@framework>
--kq252hwumeawohhf
Content-Type: text/plain; protected-headers=v1; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Subject: Re: Looking for advice on how to deal with potential slop packages
MIME-Version: 1.0

A lot of this is probably already a lost cause I think.

Linux accept LLM contributions (look for the `Assisted-by` tags), and there=
 are
already multiple subsystems that are being developed in-part, or full, by L=
LM
agents.

See the LWN discussion: https://lwn.net/Articles/1026558/

`b4` has also incorperated llm agents for the review workflow.
https://b4.docs.kernel.org/en/latest/maintainer/review.html#configuration

b4 is also heavily developed by Claude these days.

I don't think we can reasonably argue that Linux is not free software, and I
don't think we can argue for forking Linux to remove llm generated code.

My take on this is mostly apathy. I don't think we can reasonably challenge=
 the
use in the FOSS community. The productivity boost of experienced developers
using these is too appealing when we are looking at overburdened FOSS
maintainers.

We've aleady been repeadetly DDoSed by these companies. Spending hundreds of
volunteers hours keeping our services running while the companies extract t=
he
labour to sell back to the FOSS community, using their standing in the Linux
Foundation to further cement their usage in our communities.

Then the FOSS communities use these models without any care of the ethical =
considerations.

Is this depressing? Yes.

--=20
Morten Linderud
PGP: 9C02FF419FECBE16

--kq252hwumeawohhf
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=N8MW
-----END PGP SIGNATURE-----

--kq252hwumeawohhf--