Require LLM-generated themes & plugins to be tagged as such

I’m also concerned by low quality plugins and components, and I don’t really trust them when they are 99% vibe coded by someone who doesn’t know about programming.

But I also believe experienced programmers here and there saying that bad programmers existed way before AI[1]. Sloppy and unreliable, flawed code has been hand-crafted from ages.

What concerns me is when I see a vibe-coded app/plugin/whatever and I suspect the author didn’t review the code.

While I have some basic knowledge in programming, I have not coded for a long time, and was never good at it. I gave a try to vibe-code for a few projects.

Initlally very reluctant to publish them officially on meta, I finally did it after taking the time to review and understand what each piece of code was doing and also publicly state my approach in my topics. Not that I remember all I read before publishing those plugins, but at least, I could ensure the reliability and security at the time I published this work.

I have a good example to illustrate how vibe code could have made me ship a very unsafe plugin.

Before working on 🖼️ Topic Gallery, I worked on, I made a proof of concept of a similar plugin here: A way to monitor user-uploaded files 🖼️ - #2 by Canapin
It was working great, and the AI followed my directives.

There was a problem : Though the feature was clearly a moderation feature, the AI didn’t take into account permissions : any user, including visitors, were able to open this page and see all the files uploaded by all users. It was obvious for me that it should be admin only, but the AI didn’t “think” about that. And because I didn’t ask it, it made a public page by default.

So I keep telling myself that if myself and AI were able to oversee such a security leak, then non-coders vibe coding TCs and plugins might unfortunately do the same.

Opinion about AI code in software are strongly polarized. You just have to take a look at any popular open source project where Claude is cited as co-author of the last commits to see a torrent of hate from certain people.
I’m convinced that we should approach those things with caution and that our opinions should be more nuanced.

I’m not particularly in favor of having some sort of vibe-coded tag that could unnecessarily harm the popularity of well-coded and safe customizations and their author.

I know that since anyone can now produce customizations, there might be more and more coming each day, and not enough people to review them.

AI review is perhaps the solution. My gut don’t really like this idea for various reasons, but I believe that if Sam proposes this kind of solution, then it’s probably a good one, because I trust very much his skills and judgement. Especially since I myself don’t know jack shit. :laughing:

Perhaps some devs here that know about programming and Discourse ecosystem could have a title that explicitely shows they expertise in this field, so they could be seen as trustable devs even by visitors who are just looking for customizations here without registering. It would be the opposite of what you ask for, darkpxlz. Instead of “shaming” potentially unstrustable customizations, we’d emphasize trustable ones. :slight_smile:

Just food for though, tho. :person_shrugging:


  1. I should know, I was one of them! ↩︎

5 לייקים