Open source is software whose source code anyone can read, change and distribute. Openness is defined by the license: according to the Open Source Initiative definition, “Open source doesn’t just mean access to the source code.” The license must allow the program to be freely distributed, modified, and distributed in modified versions.1
The movement began in 1983 with the free GNU system project, and the term “open source” appeared in 1998.23 Today open source is found in almost every program, and its value to the economy is estimated in the trillions of dollars.45 With the arrival of AI it has also become raw material: the models that write code were trained on open source, while the projects themselves suffer from AI crawlers and a flood of AI-generated changes.
History
- 27.09.1983Richard Stallman announces that he is starting to write a complete Unix-compatible system, GNU, and will “give it away free to everyone who can use it”.2 ¶ ckb4b47nh
- 25.08.1991Linus Torvalds writes in the comp.os.minix group that he is making a free operating system for 386 computers: “just a hobby, won’t be big and professional like gnu”. It grew into Linux.6 ¶ c2mp68k6u
- 03.02.1998At a meeting in Palo Alto, shortly after Netscape decided to open the source code of its browser, the term “open source”, proposed by Christine Peterson, is born; the Open Source Initiative is founded at the end of February.3 ¶ ct64k8kz9
- 10.04.2008GitHub launches, the hosting service that became the main home of open source.7 ¶ c7deb3mcs
- 29.06.2021GitHub unveils Copilot, based on the OpenAI Codex model, which “was trained on a data set that includes a much larger concentration of public source code”.8 ¶ cav3fkjdg
- 03.11.2022Programmers file a class action against GitHub, Microsoft and OpenAI over Copilot; according to the plaintiffs, it is “the first class-action case in the US challenging the training and output of AI systems”.9 ¶ cwzsrimk7
- 28.10.2024The Open Source Initiative publishes the Open Source AI Definition 1.0: not only the weights must be open, but also “Sufficiently detailed information about the data used to train the system so that a skilled person can build a substantially equivalent system”.10 ¶ c6gytcsan
- 16.09.2026The US Court of Appeals for the Ninth Circuit upholds the dismissal of the DMCA claims against Copilot: in the court’s view, Copilot and Codex do not “remove or alter” copyright management information “from a copy of an existing protected work but instead create new works that never contained that information”.11 ¶ c4c4ngdr8
Data
| study | what was measured | result |
|---|---|---|
| Hoffmann, Nagle, Zhou (Harvard Business School), 01.20244 | what widely used open source would cost if it did not exist | recreating it would cost $4.15 billion, while its value to users is $8.8 trillion; without open source, companies would spend 3.5 times more on software; “96% of the demand-side value is created by only 5% of OSS developers” ¶ czd9pksaf |
| GitHub Octoverse, 29.10.202412 | a year of activity on GitHub | more than 5.2 billion contributions to 518 million projects; generative AI projects up 98%, contributions to them up 59%; Python overtook JavaScript ¶ cbutvs2a4 |
| GitHub Octoverse, 28.10.202513 | the same for the following year | more than 180 million developers; more than 1.1 million public repositories use large language model SDKs, 693,867 of them created in the last 12 months ¶ c2vtfm8q5 |
| Black Duck, OSSRA report, 20265 | audited commercial software; a study by a company that sells code audits | open source is present in 98% of programs; 68% have license conflicts ¶ cq2bi5r9b |
Open source is shared infrastructure: it is in almost every commercial program, and its value to users is thousands of times greater than the cost of creating it. That value rests on very few people: 5% of developers create 96% of the value. AI has increased the load on them from two sides: models learn from open source, while crawlers and automated changes eat up projects’ time and resources. So far the courts have not found the training and operation of Copilot to violate the DMCA. ¶ cfeknc6aa
Incidents
A backdoor in xz, March 2024 ¶ cjfj5sjxe
On 29.03.2024 developer Andres Freund reported: “The upstream xz repository and the xz tarballs have been backdoored.” The backdoor in the xz/liblzma compression library allowed an ssh server to be compromised (CVE-2024-3094).14 The backdoored tarballs were created and signed by a contributor going by the name Jia Tan.15 Two years earlier, project maintainer Lasse Collin had written that “my ability to care has been fairly limited mostly due to longterm mental health issues”, and of Jia Tan: “perhaps he will have a bigger role in the future”.16
AI crawlers versus open-source infrastructure, 2025 ¶ ckrvdjbad
Drew DeVault, founder of the code hosting service SourceHut, wrote on 17.03.2025: “I have spent anywhere from 20-100% of my time in any given week mitigating hyper-aggressive LLM crawlers at scale”; the service suffers “dozens of brief outages per week”; and “If you think these crawlers respect robots.txt then you are several assumptions of good faith removed from reality.”17 The GNOME community put Anubis in front of its GitLab, a proxy that “uses proof-of-work challenge to block potential AI scrapers”.18
Wikimedia: bot traffic, April 2025 ¶ ciz668dck
The Wikimedia Foundation reported that since January 2024 the bandwidth used for downloading media files has grown by 50%, and the growth comes not from people but from automated programs: “at least 65% of this resource-consuming traffic we get for the website is coming from bots”, even though bots account for about 35% of page views.19
Criticism
The Open Source Initiative has twice stated that the license of the Llama models from Meta is not open: on 20.07.2023, that “the tech giant has created the misunderstanding that LLaMa 2 is “open source” – it is not.”, and on 18.02.2025, that “Llama 3.x is still not Open Source by any stretch of the imagination”, even though Meta keeps calling it that.2021 ¶ ceqg7vn5e
Andreas Liesenfeld and Mark Dingemanse (Radboud University), after studying more than 45 generative AI systems, called this phenomenon open-washing: the term “open source” is used widely, but “many models are ‘open weight’ at best and many providers seek to evade scientific, legal and regulatory scrutiny by withholding information on training and fine-tuning data”.22 ¶ ce32w57y8
Evolution
Some major projects are shutting out AI-written code. In April 2024 the Gentoo Council ruled: “It is expressly forbidden to contribute to Gentoo any content that has been created with the assistance of Natural Language Processing artificial intelligence tools.” NetBSD says such code is “presumed to be tainted code” and does not accept it without written permission from the project leadership; QEMU will “DECLINE any contributions which are believed to include or derive from AI generated content”.232425 ¶ cefpkc7aa
The other side of the same process is a flood of unchecked AI-generated changes and reports that leaves maintainers unable to cope with the load: see maintainer crisis.
See also
References
-
The Open Source Definition — Open Source Initiative. opensource.org ↩
-
Initial Announcement — GNU Project, 27.09.1983. gnu.org ↩ ↩2
-
History of the OSI — Open Source Initiative. opensource.org ↩ ↩2
-
M. Hoffmann, F. Nagle, Y. Zhou. The Value of Open Source Software — Harvard Business School, Working Paper 24-038, 01.2024. hbs.edu ↩ ↩2
-
Open Source Security and Risk Analysis Report 2026 — Black Duck, 2026. blackduck.com ↩ ↩2
-
Linus Torvalds: “What would you like to see most in minix?” — comp.os.minix, 25.08.1991. groups.google.com ↩
-
We launched — GitHub, 10.04.2008. github.blog ↩
-
Introducing GitHub Copilot: your AI pair programmer — GitHub, 29.06.2021. github.blog ↩
-
GitHub Copilot litigation — Joseph Saveri Law Firm & Matthew Butterick, 03.11.2022. githubcopilotlitigation.com ↩
-
The Open Source AI Definition – 1.0 — Open Source Initiative, 28.10.2024. opensource.org ↩
-
Doe v. GitHub, Inc., No. 24-7700 — U.S. Court of Appeals for the Ninth Circuit, 16.09.2026. ca9.uscourts.gov ↩
-
Octoverse 2024 — GitHub, 29.10.2024. github.blog ↩
-
Octoverse: A new developer joins GitHub every second as AI leads TypeScript to #1 — GitHub, 28.10.2025. github.blog ↩
-
Andres Freund: “backdoor in upstream xz/liblzma leading to ssh server compromise” — oss-security, 29.03.2024. openwall.com ↩
-
XZ Utils backdoor — Lasse Collin, Tukaani Project. tukaani.org ↩
-
Lasse Collin: “Re: [xz-devel] XZ for Java” — xz-devel, 08.06.2022. mail-archive.com ↩
-
Please stop externalizing your costs directly into my face — Drew DeVault, 17.03.2025. drewdevault.com ↩
-
Anime girl on Gnome GitLab — GNOME Discourse, 14.03.2025. discourse.gnome.org ↩
-
How crawlers impact the operations of the Wikimedia projects — Wikimedia Foundation, 01.04.2025. diff.wikimedia.org ↩
-
Meta’s LLaMa license is not Open Source — Open Source Initiative, 20.07.2023. opensource.org ↩
-
Meta’s LLaMa license is still not Open Source — Open Source Initiative, 18.02.2025. opensource.org ↩
-
A. Liesenfeld, M. Dingemanse. Rethinking open source generative AI: open-washing and the EU AI Act — FAccT ‘24, 06.2024. facctconference.org ↩
-
AI policy — Gentoo Council, 14.04.2024. wiki.gentoo.org ↩
-
Commit guidelines — NetBSD. netbsd.org ↩
-
Code provenance — QEMU. gitlab.com ↩