--- title: Ladybird browser closes public pull requests as AI... description: The Ladybird browser project has closed its public pull request pipeline, restricting code contributions to maintainers only. The team cited two reasons:... canonical: https://daily.dev/posts/ladybird-browser-closes-public-pull-requests-as-ai-undermines-open-source-trust-signals-gaqh2ejmn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Ladybird browser closes public pull requests as AI undermines open source trust signals | daily.dev og:description: The Ladybird browser project has closed its public pull request pipeline, restricting code contributions to maintainers only. The team cited two reasons:... og:url: https://daily.dev/posts/ladybird-browser-closes-public-pull-requests-as-ai-undermines-open-source-trust-signals-gaqh2ejmn og:image: https://api.daily.dev/og/posts/GaQh2eJmn.png og:image:alt: Ladybird browser closes public pull requests as AI undermines open source trust signals og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Ladybird browser closes public pull requests as AI undermines open source trust signals **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary The Ladybird browser project has closed its public pull request pipeline, restricting code contributions to maintainers only. The team cited two reasons: tighter code ownership control ahead of an alpha release, and a structural trust problem caused by AI tools. AI-generated patches undermine the traditional heuristics open source projects use to vet contributors — a large, well-structured patch no longer signals genuine effort or good faith. The project remains open source with public code, bug reports, and standards participation still welcome. The move is preemptive, not triggered by a specific incident, reflecting broader concern that old trust signals in open source no longer hold for security-sensitive projects. ## Content The Ladybird browser project is no longer accepting public pull requests. Going forward, code contributions will be restricted to project maintainers only. The team gave two reasons. First, they want tighter control over code ownership as the project approaches its first alpha release. Second, and more interesting: they think AI tools have broken the trust signals that open source projects traditionally relied on to vet outside contributors. The logic is straightforward. A large, well-structured patch used to imply real effort and some degree of good faith. It was a rough proxy for competence and intent. AI tools have made that proxy useless. Anyone can generate a substantial-looking patch in minutes, and malicious or insecure code can hide inside it in ways that are genuinely hard to catch during review. The project isn't going closed source. The code stays public, and community members can still file bug reports and participate in standards discussions. It's just the code contribution pipeline that's shutting down. Charlie Marsh, reacting to the news, put it plainly: "the dynamics of open source are changing rapidly." He didn't have a solution, which is probably the honest response. Nobody does yet. What's notable here is that Ladybird isn't citing a specific incident or a known attack. They're making a preemptive call based on a structural problem: the old heuristics for trusting strangers on the internet no longer work the way they used to, and they'd rather not find out the hard way what that means for a security-sensitive project like a browser engine. --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#ai-coding](https://daily.dev/tags/ai-coding) [View this post on daily.dev](https://daily.dev/posts/ladybird-browser-closes-public-pull-requests-as-ai-undermines-open-source-trust-signals-gaqh2ejmn) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Ladybird browser closes public pull requests as AI undermines open source trust signals","url":"https://daily.dev/posts/ladybird-browser-closes-public-pull-requests-as-ai-undermines-open-source-trust-signals-gaqh2ejmn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ladybird-browser-closes-public-pull-requests-as-ai-undermines-open-source-trust-signals-gaqh2ejmn"},"datePublished":"2026-06-05T14:54:25.301Z","dateModified":"2026-06-07T17:44:58.066Z","description":"The Ladybird browser project has closed its public pull request pipeline, restricting code contributions to maintainers only. The team cited two reasons:...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2e7cdc977c0990954a4a15ba3dca3aa6?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2e7cdc977c0990954a4a15ba3dca3aa6?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ladybird-browser-closes-public-pull-requests-as-ai-undermines-open-source-trust-signals-gaqh2ejmn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,ai-coding","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Ladybird browser closes public pull requests as AI undermines open source trust signals"}]} ```