

If one day clang of gcc ships with a local LLM to lint code for security problems I would probably run it occasionally even on my hobby code despite being an AI hater.
Compilers already have deterministic linters built in, devs often turn them off anyway.
Quite a lot of the bugs being found in existing codebases show up as soon as you re-enable them.


The big one for me was rsync, maintainer started vibecoding it and the first release with those changes had a huge amount of regressions.
Yet it keeps getting held up as an example of “using AI tools properly”.