GUEST ESSAY: AI coding assistants are putting open source in your code without declaring it

For years, software teams have managed open source risk in two familiar forms: licensing obligations and known vulnerabilities. AI coding assistants introduce a third risk that is harder to see. Related: Where SBOMs fall short They can place open source snippets directly inside source files without declaring a package, updating a build file or...