Hacker Newsnew | past | comments | ask | show | jobs | submit | Grokify's commentslogin

Good reference, along with the article. I built a SVG sanitizer in Go and will look to these to make it more strict.

That's a great idea and a very nice project. It's great that to move back to curated blog lists from thoughtful authors.

I've been doing something similar specific to my interests so far. Will check yours out.

Here's my "Planet AI": https://grokify.github.io/planet-ai/

And some selected article/discussion analysis: https://grokify.github.io/frontierpulse/


I've found that for API integration, developing against a spec, like OpenAPI, and using/building an auto-generated SDK is still very useful for coding agents.

When there is no spec for REST APIs, I built a tool that can convert HAR files, Postman collections and other data to OpenAPI spec from which I build client SDKs for coding agents to use.


Open source has never been more alive for me. I have been publishing low key for years, and AI has expanded that capability more than 100 fold, in all directions. I had previously published packages in multiple languages but recently started to cut back to just one manually. But now with AI, I started to expand languages again. Instead of feeling constrained by toolchains I feel comfortable with, I feel freedom to publish more and more.

The benefits to publishing AI generated code as open source are immense including code hosting and CI/CD pipelines for build, test, lint, security scans, etc. In additional to CI/CD pipelines, my repos have commits authored by Claude, Dependabot, GitHub Advanced Security Bot, Copilot, etc. All of this makes the code more reliable and maintainable, for both human and AI authored code.

Some thoughts on two recent posts:

1. 90% of Claude-linked output going to GitHub repos w <2 stars (https://news.ycombinator.com/item?id=47521157): I'm generally too busy to publishing code to promote, but at some time it might settle down. Additionally, with how fast AI can generate and refactor code, it can take some time before the code is stable enough to promote.

2. So where are all the AI apps? (https://news.ycombinator.com/item?id=47503006): They are in GitHub with <2 stars! They are there but without promotion it takes a while to get started in popularity. That being said, I'm starting to get some PRs.


So we'll have 100 2-star repositories per software developer containing stolen code and that is somehow a good thing?

It is completely delusional that these copied "works" will have any effect or be used by anyone but the most rabid AI proponents just to make a point.


If there's any stolen code generated by AI, it's certainly not intentional and a DMCA notice would be appreciated. It would be interesting to see how prevalent this is in AI generated code - is anyone doing a study?

Stars will likely go up over time, but more than the stars it's the testing and maintenance over time that's valuable. There's little promotion right now, but there are already some stars, PRs, and issues. In fact, I'm working on merging PRs now.


Well, is slightly modified regurgitated code a copy or not? We have yet to have it answered in the age of AI, but e.g. I could not be selling Mickey Mouse merch with a simple color filter on for long.


Agree it will be interesting to see how things play out. There's enough permissive open-source licensed code available that using that only could be an option.

As for Mickey, is the difference from Oswald enough today?


>my repos have commits authored by Claude, Dependabot, GitHub Advanced Security Bot, Copilot, etc.

Unless you're using an enterprise license that indemnifies your liabilities, you're almost certainly breaking copyright law and your packages are unusable by any serious company as a dependency. Even permissive OSS licenses like MIT don't take effect since they're predicated on the author actually holding a valid copyright (which you don't if AI agents have committed to your repo, as affirmed by USCO).

We'll almost certainly have a situation where if an open-source repo has direct AI agent commits in its history, it will be just as untouchable for companies as GPL repos.


Given that Claude is attributed to 19M+ commits on GitHub, it will be interesting to see where this ends up. Specifically on copyright, it will be interesting to see if any DMCA takedown notices are filed, including popular projects such as OpenClaw, GSD, Gas Town, Vibium, and others.

More on the 19M+ commits here:

https://news.ycombinator.com/item?id=47501348


This argument sounds like "Well, it's too big to fail now, so it's legal for them. For all you smaller peons, it's still illegal".


That's not the intention. The intention is:

1. The code generated should be available to use. Some languages are simple enough there is an obvious way to do it. Many companies have developer programs with staff producing code intended to be used in the form of open source SDKs, example code, and tutorials.

2. If on the off chance, there is code that shouldn't be there, people should use DMCA. Anthropic, GitHub, and others support this.

3. At the macro level, it's hard to know know where this is going, so we should look to bellwether apps with more attention for guidance.


This. Maintainability and refactorability are some of the major Go superpowers for me which enables getting into any code base and updating it. These are supported by features like static typing, fast compile times, etc.

Of note, I've found this to be very important with AI generated code, where it's easy to grok and refactor AI code.


I enjoy the Go ecosystem quite a bit and haven't found many issues with documentation. I love how open source modules are documented on pkg.go.dev, including those from major providers, like AWS, Google, etc. Every library has the same references. When examples are useful, such as with charting modules, I've found that the projects do provide them. On the occasion where the README.md code is out of date, it's been easy for me to check pkg.go.dev and update it myself.


A good example is io/ioutil. It's useful to migrate to eliminate the deprecation messages, but you don't need to do it right away.


Also, most of this can be automated with `go install golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize@latest && modernize -fix ./...`


I still get substantial value out of Coursera. I started with Andrew Ng's original Machine Learning course way back when, and recently completed classes that I thought were well worth my time on Claude Code, Crew AI, AutoGen, and MCP.

While not revolutionary, a recent improvement is AI-based review, which is much appreciated for it's near instant review.

From a transformative perspective, I like the AWS Skill Builder SimuLearn classes. They say teaching is one of the best ways to learn, and I found the chat-based role play where you are the expert to be very interesting.


AsciiDoc may have a naming issue. I'm speculating that it's not restricted to the ASCII character set but the immediate question that comes to mind is what is restricted to ASCII and if it can support Unicode or even ISO 8859.


Anecdata to be sure, but over the years I've seen a lot of Asciidoc vs Markdown articles, and naming has never once been listed as an issue.


What is your language?

I've found kin-openapi to be very usable for Go:

https://github.com/getkin/kin-openapi


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: