Lyrkan

> Why would AI users not be responsible for damages arising from their usage of the AI?

Because, as usual with that kind of question, it's not that simple.

Let's say an user asks ChatGPT to get some info about something and for some reason it starts using exploits in the background to get them from a server. Should the user be responsible or OpenAI?

I think I checked a few weeks ago and whatwedo.twig was not on OpenVSX at that time, so I'm suspecting it is a case of name-squatting.

This seems to be confirmed here: https://socket.dev/openvsx/package/whatwedo.twig/versions/1....

> so you need to give something else

Well no, they don't need to. As they said they could just do something else instead of contributing (and I know I would too).

Your proposal would just end up killing those open source projects even more than what you are trying to solve.

I don't see how this would actually help. If people don't want to disclose they used AI they will just strip the message from the commit.

Maybe those customers should just be more selective with the people they allow to contribute to their project?

Also, this kind of message doesn't even bring valuable info: it doesn't explain how the AI was used (could be 99% vibe-coding, or just a quick "Please review current changes" + minor fixes at the end?), which model was used, etc. Like other commenters here I can't see this as anything else than a marketing push for Copilot.

Don't take it personally though, you are probably not the one that should be taking the heat since the change was directly pushed by your product manager.

Reminded me of this recent talk from 39C3 regarding another company (Xplora) that also sells smartwatches for children: https://www.youtube.com/watch?v=VRQz9EX2Tl0

> Also, as I said, information about the prompts quickly reveals competence / incompetence, and is crucial for management / business in hiring, promotions, managing token budgets, etc.

I fail to see why you would need that kind of information to find out if someone is not competent. This really sounds like an attempt at crazy micro-management.

The "distillation" that you want already exists in various forms: the commit message, the merge request description/comments, the code itself, etc.

Those can (and should) easily be reviewed.

Did you previously monitor which kind of web searches developpers where doing when working on a feature/bugfix? Or asked them to document all the thoughts that they had while doing so?

You know what I was referring to, no need to be pedantic.

Except that nowadays it feels more like people asking you for the time every 2 minutes while standing just in front of Big Ben.

I see it everyday on forums/Discord servers where some users will treat you like their personal search engine simply because they are too lazy to spend 10s reading the results themselves.

Yep, the comment is wrong, this line won't wait for anything but rather check that both calls resolved to a truthy value.

There are also some other incorrect things in that post that makes the code overly complicated, like:

> Every async function needs a new Promise, and needs to resolve()

That's definitely not needed unless you call something that runs asynchronously without being `async` or returning a standard `Promise` (in which case you could probably use a generic wrapper to convert them to `Promise` objects and avoid having to do that everytime).

I'm wondering if selling physical copies of the game doesn't come with legal issues...

The "Nintendo" logo you see when booting a Game Boy comes from the cartridge and is checked against one stored in the console.

If they don't match the whole thing stops, which means that you have to add (and distribute) a Nintendo logo to your game in order for it to work on real hardware.

Hiding the URL would be a terrible idea, no matter how much "simpler" it would be for the average user: it would either only be enabled for a handful of websites chosen by Google (which would mean having an inconsistent UI) or create a lot of security issues (what if someone creates a website and manages to also display "Wikipedia FR" with a similar layout?).

> Except it doesn't provide Promises, Map, Sets (and I can't remember if they added Object.Assign support, but it also was not supported when I was using it). When you provide your own polyfills, TSC complains unless you provide typings and add specific config values informing it what you polyfilled.

I think you may have misunderstood what Typescript is and isn't.

It isn't meant to provide polyfills, it is only supposed to handle the grammar of the language that needs to be transpiled.

That's why you have the two following settings: - target : Which version of the grammar will be available at runtime (eg. classes, async, ...), that's the part used by the transpiler - lib : Which libraries (eg. promises, maps, sets, ...) you know will be available at runtime (only used for type-checking)

Using a polyfill is really easy if you are using the right value for "lib" since the it will have the same signature as the real method: simply import it once in your project.

Unless the project you're working on has an Editorconfig file and your IDE supports it (VS and IntelliJ do by default).

In this case it is supposed to override your IDE settings.