Insufficient Transparency of AI‑Generated Code in F‑Droid Apps
Problem
Users lack clear visibility about whether an app's code was generated by AI, raising concerns about security and trustworthiness, and there is no effective detection method.
Pain points
- Lack of verifiable audit for AI‑generated code
- Users' lack of confidence in potential security risks
- Developers struggle to prove that code is human‑written rather than AI‑generated
Questions to verify
- Have you ever refrained from using an F‑Droid app because you feared its code might be AI‑generated?
- Would you be willing to use an automated audit tool that detects AI‑generated code in F‑Droid?
- Which metrics do you think best indicate whether a project is AI‑generated?
Evidence
quote · @匿名 · sourcecomment_4
I have been working on a sub 1500 line rust init system for over a week. Hundreds of prompts. All with a local LLM running on my own GPUs because I expect to build with total sovereignty but also zero dependencies, no libc, no alloc, no std, and a test suite that proves the 20 implemented raw syscalls all use the right values by comparing against Linux kernel sources. This would be too annoying for a human to ever write code to standards this high, and would have taken me months to write by hand, but with the help of AI I was able to get it done and built in a way I can easily review and reason about. I have a memory safe baremetal tiny linux init now built to my exact requirements.
quote · @匿名 · sourcecomment_5
I'm somewhat surprised about PipePipe. I had a look on the commits of the various components and nothing looks out of place to me. Commits look rather reasonable, comments look useful and don't show obvious LLMisms. What are the AI smells there? It would be nice to expand a bit on the reasoning behind the verdicts.
quote · @匿名 · sourcecomment_1
I also noticed a pair of very bizarre apps, both branded with the yellow “Don’t tread on me” flag: DuressKeyboard & UnlicenseLauncher. What’s most curious is that they have been in development for quite some time, yet all the changes are done not with git but through the GitHub web file editor! Someone go find that person and teach them to use git.
Disclaimer: this card is distilled by AI from community discussions as “pain point evidence”. It is a starting point for need analysis and validation, not a “validated market need”. AI has analytical limits; please open the original discussion above to manually verify before key decisions.