Vibe Coding Is the New Open Source—in the Worst Way Possible

This article examines how AI-driven “vibe coding” and plug-and-play code generation accelerate development while compounding software supply-chain risks by reintroducing known vulnerabilities, reducing transparency, and fragmenting accountability. Drawing on a Checkmarx survey, it notes widespread AI-generated code use but limited governance and approved tooling, emphasizing the growing need for secure development practices and lifecycle controls in AI-assisted engineering.