Open sourcing code that has no tests is open sourcing the fact that not even the developers know what their code does. Just that they vibe with it, and that you should too.
So using "open source" as a an argument for why software is trustworthy isn't credible by itself, because no one can reasonably audit the code's functionality without explicitly defined, automated tests that anchor the software to reality. Much less audit the code's security.
For anyone who doesn't know, the way you audit what code actually does is not by reading the source, it's by running the tests.
Jay
npub10m…x27hf
2025-03-21 16:29:23
Author Public Key
npub10mtatsat7ph6rsq0w8u8npt8d86x4jfr2nqjnvld2439q6f8ugqq0x27hfPublished at
2025-03-21 16:29:23Event JSON
{
"id": "e918ce2a901b1ecbbeffd28c95ff4cd7c876fc4622a73eddd7a6c667d3d45f67",
"pubkey": "7ed7d5c3abf06fa1c00f71f879856769f46ac92354c129b3ed5562506927e200",
"created_at": 1742574563,
"kind": 1,
"tags": [],
"content": "Open sourcing code that has no tests is open sourcing the fact that not even the developers know what their code does. Just that they vibe with it, and that you should too.\n\nSo using \"open source\" as a an argument for why software is trustworthy isn't credible by itself, because no one can reasonably audit the code's functionality without explicitly defined, automated tests that anchor the software to reality. Much less audit the code's security.\n\nFor anyone who doesn't know, the way you audit what code actually does is not by reading the source, it's by running the tests.",
"sig": "1646e956d6aaea7cb579f88c9d41ec9977b1d04993839c1b4b0df419f3deeb70d0cef09dc87874d19c87b72eea9f9cd66dd468362afa57025d916c2e824342a4"
}