Re: Looking for advice on how to deal with potential slop packages

Simon Josefsson <[email protected]> Sat, 07 Mar 2026 16:31:18 +0100
Newsgroups dev.linux.lists.distributions
Message-ID <[email protected]>
--=-=-=
Content-Type: text/plain

Morten Linderud <[email protected]> writes:

> A lot of this is probably already a lost cause I think.

+1

I wonder if there is even consensus to refuse to package AI-rewritten
packages with a different license, such as python-chardet:

https://github.com/chardet/chardet/issues/327
https://github.com/chardet/chardet/issues/331

I think that is a separate category of LLM contributions, unlike the
LLM-assistance used for many years in the Linux kernel.

If AI-rewrites for copyright reasons becomes common, that is problematic
for a free software perspective.  One recurse is to actively chose to
not use such rewrites, but to insist on using copyleft packages as a
policy and preference in order to defend user's rights.

To some extent we already see this split, between copyleft-aligned
GNU/Linux distributions like Guix that default to GnuPG and GNU
coreutils, and some commercial distributions that is on a path to
replace all GPL'd code.

Given that we couldn't establish such consensus in the pre-AI times (for
GnuPG vs Seqoia and GNU coreutils vs uutils), and there even seem to
some preference towards the non-copyleft agenda, I think the same will
happen again for AI-rewrites.

The commercial dynamic is pro LLM and against copyleft.  It is possible
to offer an alternative but it requires an active choice and interested
developers/users.

/Simon

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=nJpf
-----END PGP SIGNATURE-----
--=-=-=--