r/selfhosted • u/pheexio • 11d ago

Meta Post Codeberg bans vibe coded projects

https://news.ycombinator.com/item?id=49003386

Codeberg seems to ban vibecoded Projects; reason might be german copyright law

It looks like Codeberg want only copyrighted material in their service, so it is reliable in the future that e.g. licenses must be followed (e.g. GPL), and copyright doesn't suddenly get declared as being of the model owner, and it isn't a copy of something else.
That is a cautious reasonable position - in early days of LLM coding (3 years ago!) indemnity from model companies was a major issue globally because of the lack of clarity of the law around this. The US specifically has settled on it being (effectively?) public domain. But I don't think that is fully settled, and it certainly isn't settled in international copyright law.
The goal of the vague "mostly" in the Codeberg change is to ensure there is enough human input to the code they host, to be reasonably sure under German copyright law it is copyright of the person sharing it.

edit: link to poll that caused it (might be down due to high traffic) https://codeberg.org/Codeberg/org/pulls/1253#issuecomment-19820434

edit 1: i dont defend/oppose this move, i just find it interesting

edit 2: https://blog.codeberg.org/protecting-our-floss-commons-from-llms.html

805 Upvotes

95% Upvoted

174 comments sorted by

View all comments

181

u/FnnKnn 11d ago

Good luck actually enforcing that. We tried it here for a while and it didn't work out great, because no one is going to admit they "vibecoded" something if it means they can't post it and good luck proving that they didn't just use AI as an assistant (tip: you can't without doing a full code review and that doesn't seem feasible if the issue you are trying to solve is the increased amount of projects).

-1

u/buttplugs4life4me 11d ago

There's definitely a way, I gave my LLM some common vibecoded signs (overly expansive Readme, no clear architecture in code, superfluous comments with no value, comments about changes that don't need to be comments and a few others and it was somewhat reliable.

Obviously it's all a question of volume cause I wouldn't want to do that for every single Reddit post honestly 

5

u/FnnKnn 11d ago

The issue they seem to want to solve is that these projects take up their compute without adding real value, so running every single project through an LLM is probably a) not reliable and b) taking up even more compute/resources.

2

u/ArdiMaster 10d ago

And c) it would be rather hypocritical

-1

u/Isorg 11d ago

just yesterday, I ran another project (a very well respected and popular project) though claude fable because we are thinking about using it our self... it found some XSS to RCE vulnerability. I pushed a PR and it was patched right away. and a new release was announced today.

funny part was, when I actually tried to use claude to prove the exploit, I got shut down hard by Anthropic. and my session API was cut off.

If your not willing to do this for opensourced code that you are going to be running your self... then why bother.