Open source and AI code: the maintenance bill comes later

Takeaways

• Open source removes the license fee, while patching, upgrades and incident response remain recurring engineering work.
• AI-generated code adds to that workload. A custom internal service may have no outside maintainer community watching for vulnerabilities.
• Production software needs a dependency inventory, a maintenance budget and a named owner, whether that responsibility stays in house or is shared with a provider.