Hacker News Reader

Or use an out of date library.

In our somewhat “developer assisted” AI development it planned to use a library. We looked the library up and the GitHub page indicated it was “no longer maintained use other library Z”. When told AI agreed and compared the original to the new library (helpful), but it seemed to heavily weight GitHub stars more than active development.

When a project talks about how many stars they have, I immediately mistrust them.

Usually download counters and stars are signals for VC, which indirectly serve also as negative signals to me.

Tools like SCA and SBOM are still needed to ensure your stuff isn't out of date. That's not exactly a problem an LLM solves.

This is where a human with a discerning taste and wide knowledge of the field should notice it during a review, or at least instruct their agents to check for that. If such a human is still employed in this capacity, of course.

that can sometimes be a plus considering how dependencies used by a lot of projects are themselves targets