Claude Code defaulting to a certain set of recommended providers[0] and frameworks is making the web more homogenous and that lack of diversity is increasing the blast radius of incidents
The other day, I was forcing myself to use Claude Code for a new CRUD React app[1], and by default it excreted a pile of Node JS and NPM dependencies.
So I told something like, "don't use anything node at all", and it immediately rewrote it as a Python backend, and it volunteered that it was minimizing dependencies in how it did that.
[1] only vibe coding as an exercise for a throwaway artifact; I'm not endorsing vibe coding
It's a good point, but I don't think the problem here is Claude. It's how you use it. We need to be guiding developers to not let Claude make decisions for them. It can help guide decisions, but ultimately one must perform the critical thinking to make sure it is the right choice. This is no different than working with any other teammate for that matter.
The thing I can’t stop thinking about is that Ai is accelerating convergence to the mean (I may be misusing that)
The internet does that but it feels different with this
Interstingly, a recent conversation [1] between Hank Green and security researcher Sherri Davidoff argued the opposite. More GenAI generated code targeted at specific audiences should result in a more resilient ecosystem because of greater diversity. That obviously can't work if they end up using the same 3 frameworks in every application.
Yeah, I’ve been tracking what devtools different models choose: https://preseason.ai
That's only looking at half of the equation.
That lack of diversity also makes patches more universal, and the surface area more limited.
"Nobody ever got fired for putting their band page on MySpace."
That's the irony of Mythos. It doesn't need to exist. LLM vibe slop has already eroded the security of your average site.
It's so trivial to seed. LLMs are basically the idiots that have fallen for all the SEO slop on Google. Did some travel planning earlier and it was telling me all about extra insurances I need and why my normal insurance doesn't cover X or Y (it does of course).
It's interesting how many of the low-effort vibecoded projects I see posted on reddit are on vercel. It's basically the default.