AI is ruining open source

TL;DR

AI is destroying open source by flooding maintainers with low-quality PRs, driving away funding, and burning out the people holding everything together.

Key Points

• 1.PR spam is overwhelming maintainers: Theo's T3 Code repo got 150 open PRs within 5 days despite explicitly stating they weren't accepting contributions, forcing him to spend an entire weekend just triaging.
• 2.TL;Draw closed all external PRs due to AI-generated spam, and Node.js added strict bug reporting requirements because AI-generated issues flooded their tracker — real projects are already changing policies.
• 3.Codebase rot accelerates with AI: Every unreviewed AI-generated PR merged dilutes maintainer understanding of their own codebase, creating compounding technical debt that becomes nearly impossible to manage.
• 4.The XZ backdoor attack is now easier to replicate: Malicious actors can use AI to generate fake contributor accounts, flood maintainers with spam, and social-engineer them into handing over projects — exactly how XZ was compromised.
• 5.GitHub is doing almost nothing about the problem — Theo had to publicly shame them on Twitter to even get basic spam detection and bulk-banning tools added to repos.
• 6.Open source funding is collapsing: AI lets developers screenshot UI they like and rebuild it themselves, gutting the paid templates, courses, and workshops that maintainers relied on — Tailwind's revenue model is a direct casualty.
• 7.The Open Source Pledge asks companies to pay $2,000/developer/year to open source maintainers; Convex pays $7,692/dev and Frontend Masters pays $10,000/dev, but most large companies contribute nothing.
• 8.Vouch by Mitchell Hashimoto (creator of Ghosty and Terraform) is one promising solution — a community trust system that let Theo filter 150 open PRs down to 43 trusted ones instantly via a maintained allowlist.
• 9.The human fix matters most: Thanking maintainers genuinely, helping triage issues, leaving clear PR descriptions, and paying them when possible are the actions that keep burned-out maintainers from quitting entirely.