A package can work and still be unsafe to trust
An AI coding agent can find a dependency that solves the technical problem perfectly.
That doesn’t automatically mean the dependency deserves your trust.
As AI takes on more development decisions, AppSec teams need to separate technical suitability from security trust.
Watch the full conversation:
https://www.brighttalk.com/webcast/15811/675562
#AppSec #AISecurity #OpenSource #SupplyChainSecurity