Anthropic is doing the messy part out loud
What jumped out at me is not that Anthropic is scanning open source projects with its own models. It’s the decision to ship unreviewed findings straight to maintainers who opt in. That’s gutsy, and a little risky in exactly the way vulnerability work is risky: speed is useful until you start flooding people with half-right reports and they stop trusting the channel. Anthropic is basically admitting the old bottleneck. Finding bugs is now the easy part; the hard part is everything after that. Tha
papoo.work