I wish we'd distinguish between bullshit and clearly identified things that _may_ be future threats.
The linked post contains a whopping lie - "What does it mean for the open source ecosystem that 90% of our open source supply chain can currently be recreated in seconds with today's AI agents"
It can't. Not even close. Please, do show a working clean-room implementation of a major opensource package. (Not left-pad)
We really need to stop hyperventilating and get back to reality.
Depends on the size you want to tackle. Let's shoot for MIT licensed or similar, so we don't have to do the unethical thing.
ESLint or Webpack would probably be attempts that are decently sized for a challenge.
Cheerio would be a bit smaller.
Chalk is probably close to the absolute lower bound of what's even meaningful. (You'd likely just regenerate a package that size from scratch instead of wondering about compat)
The linked post contains a whopping lie - "What does it mean for the open source ecosystem that 90% of our open source supply chain can currently be recreated in seconds with today's AI agents"
It can't. Not even close. Please, do show a working clean-room implementation of a major opensource package. (Not left-pad)
We really need to stop hyperventilating and get back to reality.