Recent AI capabilities in cyber security, such as „hacking“ and even identifying new vulnerabilities in source code, have reignited the debate on open-source software security. OSS projects are inundated with both genuine and false alerts regarding new critical bugs. But the arguments are nothing new: security through obscurity was never a good idea. However, we must pay more attention than ever to secure software architectures and development processes in OSS projects.
