ntfy.sh v2.18.0 was written by AI

https://lemmy.world/post/43988094

New ntfy.sh v2.18.0 was written by AI - Lemmy.World

According to the release: >Adds experimental PostgreSQL support >The code was written by Cursor and Claude >14,997 added lines of code, and 10,202 lines removed >reviewed and heavily tested over 2-3 weeks This makes me a bit uneasy, especially as ntfy is an internet facing service. Am I overreacting or do you all share the same concern?

I’m so tired of that.

I’m using it for scripts notifications + unifiedpush. I don’t know where to start to find the fitting alternative.

The maintainer you and said that they tirelessly tested, reviewed and verified changes over the course of 3 weeks to make sure that things were running and operating correctly.

This is how it should be done. It’s not like they’re vibe coding this.

And the lead dev for Huntarr said they were following best practices, and had a heavy background in cybersecurity. And we’ve all seen how that turned out.

This change 100% smells like vibe code. They refactored nearly 15k lines of code in a single push. That’s not something you just do on a whim without a team of full time devs or vibe coding. And we know they don’t have the former, so it is almost certainly the latter.

Wait… what happened to Huntarr?
Long story short? You should kill the container and change your related passwords/API keys. The dev tried censoring it for a while, but couldn’t keep up with the posts. They eventually nuked the entire sub and deleted their Reddit account. They also privated their GitHub and changed their username.