I think I’d be okey with semi automated submissions if they are managed by the maintainer themselves. There were a couple of security incident of long existing vulnerabilities recently. I think its fine if maintainers have a bot running making security audits to find and fix them before somebody else can use them. Of course if some human going over potential PRs.
the most basic rule of thumb that should ALWAYS be held to is that a human has to take responsibility for the actions of a tool, computers cannot be held accountable.
A computer can never be held accountable, therefore computers must never make a management decision.
Rules about submissions and determining if a pr helps a project is a management decision. AI or automated tools can reject a PR if it fails to meet a human made rule (like failing to compile or breaking code standards) but accepting a pr to merge? That should be a human.
I think I’d be okey with semi automated submissions if they are managed by the maintainer themselves. There were a couple of security incident of long existing vulnerabilities recently. I think its fine if maintainers have a bot running making security audits to find and fix them before somebody else can use them. Of course if some human going over potential PRs.
the most basic rule of thumb that should ALWAYS be held to is that a human has to take responsibility for the actions of a tool, computers cannot be held accountable.
A computer can never be held accountable, therefore computers must never make a management decision.
Rules about submissions and determining if a pr helps a project is a management decision. AI or automated tools can reject a PR if it fails to meet a human made rule (like failing to compile or breaking code standards) but accepting a pr to merge? That should be a human.