I guess it was supposed to be a successor to the *arr stack (radarr, lidarr , sonarr, etc). If you’re not familiar, they automate the downloading & organization process for movies, music, and tv.

I believe it was supposed to monitor your jellyfin library and look for potential upgrades.

Seems to be some sort of a tool that scans your media library and fetches missing media (the one that failed to download or something)

I am getting very annoyed reading "What is Huntarr?", "The Real Problem: Why You Need Huntarr" and "Understanding the Gap Problem". Am I too non-native english speaker to understand it or is it really the same 3 paraphrased paragraphs?

I'd never heard of it either before deed diving on this, and I'm thankful i hadn't heard of it. Ugh. Fuck AI.

You're here, that's a good start...

I tend to look at a project's Issues tracker, that gives me a feel for how the author(s) deal with feedback... some projects have hundreds of open tickets with barely any interactions, yet code updates "2 days ago".

Being here and reading about who's using what will help remove the major outliers

All opensource needs more eyeballs, which is still the advantage over closed source.

Sounds like the solution would be a public code sharing platform that specifically bans AI generated code. Then, at least, we’re moving in the right direction. Do any alts to GitHub provide such a rule?

It doesn’t need to be perfect nor catch every offender. No need for magic AI-coded detection sauce. If it just detected slop, human or otherwise, and obviously AI-written code, with a reporting mechanism for user-driven monitoring, that could be a good start

But, should we worry about it being a source for AI companies to scrape? How should we deter that?

This is what good distros do, well some of them, I don't think low touch repos like AUR/Homebrew/PPA's would catch this, but I doubt huntarr will ever make it to Debian.

Ofc the trend of running upstream unverted containers undermines this.

Sometimes it's really easy, open a bunch of code files and see if it's littered witb comments. If it is: likely sloppified

I'm not so much worried about 'vibe coding' as long as the dev actually knows the validity of the code presented in the LLM. At that point, the LLM becomes the assistant, not the dev itself. However, if I were to speculate, this dev team didn't, got called on it, didn't know how to respond or validate the code, so they closed up shop.

Not sure what you mean. I just saw asterisks.

******** ?

Holy shit you unlocked a hidden memory I forget existed. Thank you.

try to stick to reputable projects 1st and be always wary of shady installation tactics

One of the first things I look for are longevity, last updated/activity, and then I look at the issues posted and responses. I like mature apps because I don't possess the intelligence to audit code.

They banned the user that did the robust cybersecurity audit. They banned everyone who pointed it out or linked to the post or mentioned it. They took the subreddit private. The clown dev has a donate feature and claims that it will be used to put his daughter through school. Just scum all around.

This developed further. Better be done with it and stay safe. Read the linked reddit thread for info.