And then you're also the maintainer of the software in charge of keeping it up-to-date with its dependencies etc.
not if the software is functional today, and doesn't require interacting with third party systems (like this tinylittleoffice suite).
By the time the underlying infrastructure (like browser compatibility, or self-hosting OS becoming obsolete) fails, you're likely no longer using it anyway.
The "documents" seem exportable in text format, and in any case, potentially salvageable with another vibe-coded tool if such need arise.
Therefore, the original author is no required to maintain it.
you'll be spending tokens on getting it maintained, and if you don't spend enough you get pwned by guys who do. who exactly is winning in this scenario?
"democratizing software"...
you mean real oss maintained by professionals and security experts, as opposed to the cannibalized gpl-washed version llm spit out?
Always online, internet of shit and perma update crap came at that same time, first for the OS and later for everything. Oh, plus two decades of using shady Russian software for virus scanning. Shit went up, update everything became everywhere and everyday. Plus gigabyte frameworks for functionality that was kilobytes before.
My point in cursing too much? (Sorry, mentally screaming FUD here.) That tiny code projects, even without an active maintainer, in the LLM-era are probably a lot more secure when run by the people they target (we run containers, and sandboxes, the cool kids run immutable distros). This is democratizing software, and it has the great feel of old.
Please everyone, vibe code tiny project with tiny codebases everyday. Dump them on GitHub in a free tier. Make so many that the people have a free choice again! And go watch Cliff Stoll again for that hacker energy!
So just for select .1% of pros who know how to do that and the rest can get f#cked. "democratizing" software...
"You keep using that word. I do not think it means what you think it means."
However for unique, bespoke software (vibe-coded or not), the payoff is as small as a single endpoint. You’ve found an exploit in MikesOwnOfficeSuite and now have access to Mike’s PC. You’ve got to spend the same tokens again to find an exploit in SuesAwesomeOfficeApps. It still might be worth it in a spear-phishing scenario.
Security through obscurity is back!