AI Coding Assistants
AI Code and Open-Source Licenses: The Attribution Problem
AI-generated code can carry copyleft obligations with no attribution signal at all. What GPL contamination means and how to realistically check for it.
Browse the archive
Tag: Software Supply Chain
AI Coding Assistants
AI Coding Assistants and Your API Keys: A Security Checklist
AI assistants read your whole workspace, .env files included. Here is what to exclude, what to rotate, and how to tell if a key…
AI Coding Assistants
Spot a Hallucinated npm Package Before You Install
An AI assistant imported a package you don't recognize. Here is the fast check before you run npm install, and what to do if…