heise+ | How AI Puts Open-Source Maintainers Under Pressure

TL;DR AI-generated AI-generated security vulnerability reports are pressuring open-source maintainers. A 2024 Tidelift survey found 60 percent earn no income from their work. In response to the influx of AI reports, the lead developer of the cURL project closed its bug bounty program in January 2026.