GitHub is facing a surge in low-quality, AI-generated code and fake repository activity, leading major open-source projects to restrict external submissions to maintain software security and integrity.

Key Points

• Nearly half of all new code on GitHub is now AI-generated, yet developer trust in AI-produced code has fallen from 77% to 60%.
• Research indicates AI-written code contains 1.7 times more critical issues than human-written code, with 45% of submissions containing OWASP Top 10 vulnerabilities.
• A randomized controlled trial by Meter found that AI users were 19% slower at coding despite perceiving themselves as 20% faster.
• Major projects including curl, Ghost, and Tailscale have implemented restrictions or bans on external pull requests to combat the influx of AI-generated noise.
• Carnegie Mellon University researchers identified 6 million fake stars on GitHub, while security firm Socket linked 370,000 "fix stars" to fraudulent activity.

Why it Matters

The proliferation of unverified AI code threatens the stability of the open-source ecosystem by overwhelming maintainers with low-quality submissions and security vulnerabilities. Implementing automated governance and rigorous auditing is becoming essential for organizations to safely integrate AI tools into production environments.