Ladybird Is Changing How It Develops

Ahead of its first alpha release, the Ladybird browser project is overhauling its development process. The core change is that going forward, the project will stop accepting public Pull Requests (PRs), and all code changes will be introduced directly by project maintainers only.

The main driver behind this decision is the advancement of AI tools. In the past, a large code patch served as a signal of a contributor's substantial effort and good faith, but now AI can be used to quickly and cheaply produce work that appears to be a serious contribution. This has undermined the existing trust model.

It was particularly emphasized that since browsers run untrusted input from the internet on users' devices, even a single well-disguised, AI-generated security vulnerability could become a fatal pathway for attackers.

Ladybird will remain open source, but is shifting the direction of external participation away from code submissions and toward the following instead:

• Clear bug reports with minimal reproductions
• Website testing and technical feedback
• Standards and design discussions
• Security reports

This case illustrates how AI is breaking the social contract between author and reader, and has sparked discussion about whether the open source ecosystem may be reverting to a trust-based, closed community model.