AI Is Adding to the Review Load on Open-Source Projects, Many of Them Thinly Funded
Help Net Security, Thursday, September 17th, 2026
ACM authors warn that AI-generated contributions are outpacing the volunteer maintainers who must vet them.
Six authors writing for the ACM Technology Policy Council, including Simson Garfinkel and Josiah Dykstra, argue that AI coding tools are making open source harder to maintain and secure.
The tools write code and find flaws quickly, but human maintainers still have to judge the output, and much of what now arrives is poor quality.
The funding asymmetry is stark: the Linux Foundation took in $292 million in 2024 while the Apache Software Foundation, cited as an example of volunteer-and-sponsorship projects, took in $2.4 million. AI-found flaws also push organizations to patch sooner, which is hard for applications assembled from many components that each need their own patch and re-release in sequence.