Alberto Angulo

Software · Economics of code

What Changes When Code Gets Cheap

Writing code has become the cheap part of software. Deciding what to build, checking it, running it and changing it for years got cheaper by much less, so the world gets far more software and far more to look after. Where the cost goes, and what to do about it.

Alberto Angulo11 min read · 19 October 2026

At the end of January 2026 the open-source project curl shut down its bug bounty, the program that paid outsiders for reporting security flaws. Its lead developer, Daniel Stenberg, gave the reason plainly: a flood of low-quality reports, many of them generated with AI, that the project's small security team had to evaluate one by one.

Writing a report had become nearly free. Evaluating one had not. The evaluators ran out of time first, and a program that had worked for years stopped.

That small story has the shape of what is happening to software in general. Writing code has become much cheaper, and the popular prediction stops there: software gets cheap, so everything made of software gets cheap. The prediction skips a step. Writing is one line on the bill for a piece of software. The other lines, deciding what to build, checking that it works, running it and changing it for years, fell by much less. So cheap code lowers the bar for which software is worth starting and leaves the bar for owning it almost where it was. The result is more software, more to keep alive, and a new bottleneck in the people who can check and maintain it.

Six lines on the bill

A piece of software costs money in six places.

Someone works out what it should do and writes that down precisely enough to build from: specification. Someone writes the code. Someone reads and tests it and judges whether it does the right thing safely: verification. Someone connects it to logins, data and the systems around it: integration. It has to run, be monitored and be fixed when it breaks: operation. And it has to keep changing as requirements move, dependencies update and the world shifts: maintenance.

AI coding tools act on these lines very unevenly. Writing has collapsed, and that is where all the excitement comes from. Specification got somewhat cheaper, because a model drafts a spec and a working prototype is a fast way to learn what people want, but the facts still live in people's heads and contracts. Verification got partly cheaper, because models write tests and first-pass review comments, but judging stays with a person and there is now more to judge. Integration glue is cheap; permissions, approvals and the undocumented habits of other systems are not. Operation barely moved, because someone is still accountable when it breaks. Maintenance got cheaper for mechanical edits and not for deciding what to change.

The catch is that the lines that moved least were always the big ones. Robert Glass's well-known collection of software engineering facts puts maintenance alone at 40 to 80 percent of a system's lifetime cost. Even inside the build, Fred Brooks's old rule of thumb gave only a sixth of a schedule to coding; the rest went to planning and testing. The code is the small part and the years are the large part.

One tool, before and after

Take an approval-tracking tool for an operations team. The numbers are illustrative, chosen to be plausible, so you can swap in your own.

In 2022 one engineer builds it in 30 person-days: 5 specifying, 15 writing, 5 testing, 5 integrating and deploying. Afterward it needs about a day and a half a year of operation (access requests, questions, the odd incident) and six days a year of maintenance. Over five years that is 67.5 person-days, about $47,000 at a fully loaded $700 a day.

In 2026 the person who needs the tool builds it, steering a coding agent, in two days. Operation stays the same. Maintenance halves to three days a year, because upgrades and small changes go faster.

Guess first

The build just got 15 times cheaper. How much cheaper is owning the tool for five years: about 15 times, about 8 times, about 3 times, or barely at all?

About 2.8 times. The five-year total falls from 67.5 days to 24.5, from about $47,000 to about $17,000. Building used to be 44 percent of what the tool cost over its life. Now it is 8 percent, and running and maintaining the tool is the other 92.

2022 2026 Integrate Specify Write Verify Operate Maintain 5 15 5 5 7.5 30 Build: 30 days (44%) Operate and maintain, years 1 to 5: 37.5 days (56%) Lifetime total 67.5 days (about $47,250 at $700 a day) Build: 2 days (8%) = 0.5 specify + 0.25 write + 0.75 verify + 0.5 integrate 7.5 15 Operate Maintain Operate and maintain: 22.5 days (92%) Lifetime total 24.5 days (about $17,150) 10 person-days (same scale in both rows). Illustrative, not measured.
Building gets 15 times cheaper, but owning the tool for five years gets only 2.8 times cheaper, because running and maintaining it becomes 92 percent of the total. Illustrative lifetime cost of one internal tool in person-days; the assumptions are stated in the text and are not measurements.ComputedSource: Computed from the illustrative assumptions in the article; method in the notes and sources for A37.

Now change one assumption, which is the most useful thing to do with any example like this. Suppose only the writing line falls, and specifying, testing and integrating take as long as they did in 2022. The build then takes about 15 days instead of 30, twice as cheap, and the five-year cost improves by only 1.3 times. The headline fifteenfold depends on the other lines shrinking too, and they shrink for two different reasons.

Specification and integration shrink mainly because the handoff disappears. When the person who needs the tool builds it, there is no requirements document to write, no meeting to explain it, no waiting for someone else's queue. That is an organizational change more than a technical one, and it works only when the builder already understands the problem: common for small internal tools, rare for products with many stakeholders.

Verification shrinking from five days to under one means something less comfortable. Either generated tests are standing in for careful review, or the team accepts a lower standard of checking because the tool is internal. Either can be reasonable. Either is exactly where the quality risk of the cheap build enters.

And the halved maintenance is the most optimistic number in the example. Nobody typed this code, so whoever has to change it in year three understands it less well than its author would have. There is no good measurement of that extra cost yet, so the example leaves it out, which flatters 2026.

Writing got much cheaper. Deciding, checking, running and changing the result got cheaper by much less.

Why there will be more software, not less

If each tool costs less, does an organization spend less on tools? Usually not, and the reason is more than 160 years old.

In 1865 the economist William Stanley Jevons argued that burning coal more efficiently would make England burn more coal, not less, because cheaper power made engines worth using everywhere. That is the Jevons paradox, and it has a condition people often forget: total use rises only when a lower price unlocks proportionally more demand. Where demand is already met, efficiency simply shrinks the bill.

Software is a strong candidate for unmet demand, because the jobs it could do form a long tail. Every organization has a handful of processes where a tool would pay for itself many times over, and a much longer list where a tool would barely pay back what it costs to build and keep. At 2022 prices the second list stayed a wish list.

10 20 50 100 200 400 0 20 40 60 80 100 120 2022: $47k 2026: $17k about 21 projects clear the 2022 bar about 90 clear the 2026 bar about 68 projects newly worth doing candidate projects, ranked by lifetime value (best first) lifetime value, $ thousands (log scale) Illustrative: value of project n = 400 / n^0.7, in $ thousands. A project is worth doing when its value exceeds its lifetime cost.
When a tool's lifetime cost falls from about $47,000 to about $17,000, the number of projects worth doing rises from about 21 to about 90. Candidate projects ranked by five-year value on an illustrative curve (log scale); the shaded area is the work that newly clears the bar.ComputedSource: Computed from an illustrative power-law assumption and the lifetime costs in the worked example; the curve is not measured data.

Rank every possible internal tool by what it would be worth over five years, best first, and draw a line at what a tool costs to own. With the illustrative curve in the figure, about 21 projects clear the 2022 line. When the lifetime cost falls from about $47,000 to about $17,000, about 90 clear it. Each tool is 64 percent cheaper, and total spending on tools still rises by about half. Most of the projects that newly make the cut are small.

How big that effect is depends on how fat the tail is, and nobody has measured real backlogs well. With a thin tail the number of tools still grows, but total spending falls. My bet is that internal tools and niche products have fat tails, because every organization has a huge number of small, specific jobs that nobody ever automated.

The early signs point that way, with a caution: more supply does not prove demand. App releases in the first quarter of 2026 were up 60 percent on a year earlier across Apple's and Google's stores. About a third of the builders surveyed by Retool, which sells tools for building internal software, said they had already replaced at least one bought product with something they built. Whether anyone still uses all that new software six months later is the number that would settle it.

The upkeep arithmetic

Here is the consequence most plans miss, and it falls straight out of the same example.

At the 2022 bar the organization owns 21 tools, each needing 7.5 days a year of operation and maintenance: about 158 days a year, roughly 0.7 of an engineer. At the 2026 bar it owns about 90 tools at 4.5 days each: roughly 400 days a year, about 1.7 engineers. Upkeep per tool fell by 40 percent. Total upkeep rose two and a half times.

That result does not hang on the illustrative curve. Total upkeep rises whenever the number of tools grows by more than about 1.7 times, and every plausible curve gets there. Each new tool also brings dependencies to update, credentials to rotate, data access someone had to approve, and an inventory entry someone should read.

The people who can supply that capacity are the same people already short of time for review. When agents write most of the code, the volume of changes to read multiplies. Faros AI, which sells engineering analytics, compared teams with high and low AI adoption inside the same companies in 2026. Under heavy adoption, pull requests (the proposed changes developers submit for review) were half again as large, median review time was about five times longer, and deployments per week fell by about 12 percent. Google's DORA research describes AI as an amplifier of whatever a team already does well or badly. It is the curl story at company scale: producing gets cheap, evaluating does not, and evaluating sets the pace (Where the Saved Time Goes).

Cheaper code lowers the bar for which projects are worth starting. It does not lower the bar for owning them.

So the forecast that matters is about review capacity. The limit on how much software an organization can own will be how much it can check and keep, more than how much it can write. Teams that change what review means, toward checking behavior against specifications and tests and away from reading every line, should end up owning more working software than teams that don't (Reviewing Code You Didn't Write).

What happens to software prices

It is natural to expect software prices to fall with the cost of writing code. The link is less direct than that, because selling software to one more customer always cost almost nothing. Prices tracked what customers would pay given their alternatives and the cost of switching. Cheap code changes the alternatives: it makes it cheaper to enter a market, to copy a competitor's feature and to build the thing in house.

So the pressure lands unevenly. It is strongest on products whose value is a set of features that are easy to describe and easy to leave: a form builder, a simple CRM, a workflow tool with no deep data behind it. It is weakest where the customer pays for something that did not get cheaper: data the vendor holds, a distribution channel, accumulated trust, a place in the daily workflow, and above all the operation, security and compliance of the product. A vendor spreads those costs across all its customers. A company that builds alone carries them alone, and cheap writing does not undo that economy of scale (Where the Moat Moves).

Investors have already priced the fear. Between mid-January and late February 2026 the S&P Software and Services index lost about a quarter of its value, a slide that began with Anthropic's release of Claude Cowork and continued with plugins aimed at sales, legal review and customer support. A stock price is a forecast, though. Price changes caused by cheap code have not been measured yet, and the signals to watch are discounting and customer retention among feature-heavy vendors.

The fair objection

The strongest objection says writing code was never the hard part, so making it cheap changes little. It is largely right, and Brooks supplies the arithmetic. If coding was a sixth of a project, eliminating it entirely speeds the project up by at most 1.2 times. For large systems with many stakeholders, regulated domains and long specification phases, the objection holds almost completely.

Two things survive it. First, projects are accepted or rejected against a cost bar, and the share of writing varies by project. A small tool for a well-understood job, where writing was most of the cost, can flip from not worth it to worth it even if the average project barely speeds up. The objection is decisive about how fast existing projects go and weak about which projects exist.

Second, cheap code is also a way to find out what people want. Brooks himself recommended prototyping for that. When a working prototype costs an afternoon, a team can put something in front of users and learn from their reaction, which attacks the specification line, one of the expensive ones, and not only the writing line.

What I'd do

Price five years of ownership, never the build. A fair build-or-buy comparison counts the whole life, including the person who answers when it breaks. A subscription includes operation, security patches, compliance work and features someone else decided to build. A built tool includes the year-three maintainer, the credentials and the upgrade backlog. Never set a subscription price against a build price.

Write down who gets called when it breaks in year three. Before approving any new internal tool, put a name there. If nobody will, the tool is a liability that hasn't happened yet.

Build what encodes your own process, buy what is a commodity. Build when the tool is small, follows your own way of working, has a named owner and fails cheaply. Buy when it is a commodity function, carries compliance obligations, must connect to many other systems, or depends on knowledge that changes outside your control, such as tax rules (Who Should Build It).

Invest in what survives a rewrite. A written statement of what a tool is for, tests that define correct behavior and stable interfaces between components all outlive the code behind them (Tests Are the New Specification). Code can now be regenerated in an afternoon. The decisions recorded in specifications and tests can't, and they are what make a cheap rewrite safe.

Budget for review before you add agents. A plan that doubles the code and leaves review alone is a plan to build a queue.

For small tools, cheap code makes the old question, what it costs to make, nearly irrelevant. The question that decides is what it will cost every year to keep, and who will be doing the keeping.

Check yourself

Why did a fifteen times cheaper build make five-year ownership only about 2.8 times cheaper?

Writing was one of six cost lines. Operation and maintenance barely moved, and they are now 92 percent of the lifetime cost.

Why can total upkeep rise even when each tool costs less to keep?

Cheaper tools clear the bar for many more projects, so the organization owns many more tools. Total upkeep rises whenever the number of tools grows by more than about 1.7 times.

What limits how much software an organization can own?

How much it can check and keep, which is review and maintenance capacity, more than how much it can write.

Notes, sources and method

For readers who want to check the numbers behind What Changes When Code Gets Cheap. Sources were checked on 11 October 2026.

Key numbers

Number in the articleExact valueSource and dateNotes
curl ended its bug bounty, end of January 2026Ended 31 January 2026Stenberg, blog post, 26 Jan 2026 [19]; first reported by The Register, 21 Jan 2026Reason given: a flood of low-quality reports, many AI-assisted, that the small security team had to evaluate one by one.
Maintenance 40 to 80 percent of lifetime costFact 41: "Maintenance typically consumes 40-80 percent of software costs"Glass 2002 [1]Checked against the publisher's table of contents; book text not consulted. Fact 42: enhancements are roughly 60 percent of maintenance cost, so maintenance mostly means changing software because needs changed, not repairing decay. Google's SRE book quotes 40 to 90 percent of total cost after launch, citing Glass, and remarks on how wide the range is [2].
Coding a sixth of a scheduleOne third planning, one sixth coding, one quarter component and early system test, one quarter system testBrooks 1975, ch. 2 [4]Large systems of another era. "No Silver Bullet" (1986) [5] argues the hard part is specifying, designing and testing, and recommends rapid prototyping.
Build 15x cheaper, five-year cost 2.8x cheaper; 44% to 8% build share; 92% after launch30 to 2 days; 67.5 to 24.5 days ($47,250 to $17,150, ratio 2.76)Worked example (method below)Illustrative assumptions, not measurements. Maintenance is 61 percent of the 2026 total, inside Glass's range, although the example was not calibrated to land there.
Writing-only variant: build about twice as cheap, five-year 1.3x15.25 build days (1.97x); 52.75 lifetime days (1.28x)Worked exampleThe headline 15x requires specification, verification and integration each to shrink roughly 7 to 10 times. No study measures that directly.
21 projects clear the 2022 bar, about 90 the 2026 bar; tools 64% cheaper; spend up about half21.15 and 89.95 projects; cost drop 63.7%; spend +54%Illustrative demand curve (method below)Depends on the shape of the curve; see the sensitivity table.
Upkeep: 158 days (0.7 engineer) to about 400 days (1.7 engineers); per tool down 40%; total up 2.5x21 × 7.5 = 157.5; 89 × 4.5 = 400.5 days a year; 230 working days a yearWorked exampleTotal upkeep rises whenever the count of tools grows by more than 7.5 / 4.5 = 1.67x.
Jevons, 1865The Coal Question, ch. VII; "The very contrary is the truth."Jevons [12]The paradox holds only when demand is price elastic. Bessen [13] found demand elastic in the early decades of US textiles, steel and automobiles, so automation raised employment, and saturated later, after which automation reduced it.
App releases up 60% in Q1 2026+60% year over year across App Store and Google Play; +80% on iOS aloneAppfigures via TechCrunch, 18 Apr 2026 [15]Release counts measure supply, not use. TechCrunch called AI coding tools a working hypothesis for the cause.
About a third of Retool builders replaced a bought product35% of 817 builders replaced at least one SaaS tool; 78% expected to build more in 2026Retool 2026 Build vs. Buy report, late-2025 survey [14]Vendor survey; sampling not described. The report also notes that time saved on one task can be offset by time lost to maintenance.
Faros: PRs half again as large, median review time about 5x, deployments per week down about 12%PR size +51%; median review time 5x; deployments per week −11.7%; tasks completed +33.7%; incidents per PR about 3xFaros AI, AI Engineering Report Q2 2026, 22,000 developers [10]Vendor telemetry comparing high and low adoption within the same organizations; correlational; definitions unpublished; page undated.
DORA: AI as an amplifier"AI doesn't fix a team; it amplifies what's already there." Nearly 5,000 respondents; AI adoption correlates with higher throughput (it did not in 2024) and lower stabilityDORA 2025 [9]Survey, correlational.
S&P Software and Services index lost about a quarterAbout 25% from 12 January to 23 February 2026The Batch, issue 342, 27 Feb 2026 [20]Period began with the release of Claude Cowork and included plugins aimed at sales, legal review and customer support; the index began to recover when Anthropic announced partnerships with several affected companies (24 Feb). A stock price is a forecast.
Brooks cap 1.2x1 / (1 − 1/6) = 1.2ArithmeticIn the worked example writing was half the build, so making it free caps the build at 2x.

The figure a37-team-shift (who leads each activity before and after coding agents) was dropped from the article in the 19 October 2026 rewrite; its content survives as the review-capacity argument.

Method and assumptions

All figures in the worked example are illustrative assumptions, not measurements.

  • Cost of a person-day: $700 fully loaded (about $160,000 a year over 230 working days). Lifetime: 5 years.
  • 2022 build: 5 specifying + 15 writing + 5 reviewing and testing + 5 integrating and deploying = 30 days. Operation 1.5 days a year (7.5 over five years). Maintenance 6 days a year (30). Total 67.5 days, $47,250.
  • 2026 build: 0.5 + 0.25 (a person steering an agent) + 0.75 + 0.5 = 2 days. The requester is the builder, so the handoff disappears. Operation 7.5 days. Maintenance 3 days a year (15). Total 24.5 days, $17,150. Ratio 2.76.
  • Writing-only variant: 5 + 0.25 + 5 + 5 = 15.25 build days, with 2022 operation and maintenance; total 52.75 days; ratio 1.28.
  • The maintenance halving rests on a hypothesis. Agents apply upgrades and small changes quickly, but the extra cost of understanding code nobody typed is unmeasured and left out, which flatters the 2026 column.
  • Demand curve: value(n) = 400 / n^a in $ thousands for the nth-best project, a = 0.7. Projects clearing cost c: (400 / c)^(1/a), giving 21.1 at $47.25k and 89.9 at $17.15k. Total spend with whole projects (21 and 89): $992k and $1,526k, +54%. The model gives every project the example tool's cost, which overstates the effect for large projects where writing was a smaller share.

Sensitivity to the curve's exponent (continuous counts):

Exponent aProjects at the 2022 barProjects at the 2026 barChange in total spendChange in yearly upkeep
0.5 (fat tail)72544+176%+355%
0.7 (figure)2190+54%+155%
1.08.5230%+65%
1.5 (thin tail)4.28.2−29%+18%

Total spend rises only when the exponent is below 1, which is the Jevons condition restated. Upkeep rises in every row, and with these two costs it rises for any exponent below about 1.98. Whether real backlogs have fat or thin tails has not been measured; the article's view that internal tools and niche products have fat tails is a judgment.

The calculation script is reproduced in the notes file for this article.

Caveats and open questions

  • How big the speedup is remains disputed. METR's 2025 randomized trial (16 experienced open-source developers, 246 issues in their own repositories) found tasks took 19 percent longer with AI allowed, while developers believed they had been sped up by 20 percent [6]. Its February 2026 follow-up (57 developers, more than 800 tasks, newer tools) estimated about 18 percent less time for returning developers (interval −38% to +9%) and about 4 percent less for new recruits (−15% to +9%); 30 to 50 percent of participants withheld tasks they did not want to do without AI, so METR calls the result an unreliable signal and probably a lower bound [7]. Three field experiments at Microsoft, Accenture and an anonymous Fortune 100 company (4,867 developers, Management Science 2026) found about 26 percent more completed tasks with a code-completion assistant, standard error 10.3 points, so roughly 6 to 46 percent; less experienced developers gained more [8]. The studies disagree about size and roughly agree that review and stability absorb part of the gain. None measures lifetime cost.
  • Anthropic's internal figures (132 survey respondents, self-reported gains averaging about 50 percent; 67 percent more merged pull requests per engineer per day after adopting Claude Code; 27 percent of Claude-assisted work would not otherwise have been done) are the company's own self-report and internal data; the authors flag selection bias [11].
  • Selection is the strongest competing explanation for the review and stability findings: teams that adopt AI heavily may differ in ways that also produce incidents. A multi-year comparison of maintenance cost per delivered feature in matched teams would settle it.
  • Quality of generated code. Veracode ran more than 100 models on 80 tasks built around known weakness classes (2025); 45 percent of samples failed its security tests, on tasks designed to invite flaws [17]. Spracklen and colleagues (USENIX Security 2025) found 19.7 percent of 2.23 million package references from 16 models pointed to packages that do not exist; a 2026 single-author preprint on five newer models found 4.6 to 6.1 percent [18]. These belong to the maintenance and ownership argument and are taken further in the planned piece on technical debt (A42).
  • Developer growth. GitHub counted more than 36 million new developers in the year to August 2025 and said a free Copilot tier coincided with a step up in sign-ups [16].
  • Evidence against the more-software story would be new software whose usage and retention do not follow its volume. The number to check is active use of new tools three or six months after release. One-off scripts and personal tools barely carry the ownership problem; internal tools and niche products carry all of it (see the planned piece A43).
  • Prices. No measurement yet attributes price changes to cheap code. If list prices and net revenue retention for feature-defined software hold through 2027, the copy-pressure hypothesis is weak.
  • What would overturn the conclusion: organizations with heavy AI adoption seeing lifetime cost per delivered feature, maintenance included, flat or rising over two to three years.
  • Review load illustration (dropped from the body). Combining Anthropic's 67 percent more merged pull requests with Faros's 51 percent larger pull requests gives 1.67 × 1.51 = 2.52 times the reading per reviewer, if both held at one company and review time scaled with size. The figures come from different organizations, so this is only illustrative.
  • Orientation, not evidence: Simon Willison's February 2026 note that code is now nearly free to produce while good code remains expensive [21]; Software Engineering at Google's saying that software engineering is "programming integrated over time" [3].

Sources

  1. Glass, R. Facts and Fallacies of Software Engineering. Addison-Wesley, 2002. Facts 41 and 42, checked against the publisher's table of contents at https://www.informit.com/store/facts-and-fallacies-of-software-engineering-9780321117427; the book's text was not consulted.
  2. Beyer, B., Jones, C., Petoff, J., Murphy, N. R. (eds.). Site Reliability Engineering, Preface. O'Reilly/Google, 2016. https://sre.google/sre-book/preface/
  3. Winters, T., Manshreck, T., Wright, H. Software Engineering at Google, ch. 1. O'Reilly, 2020. https://abseil.io/resources/swe-book/html/ch01.html
  4. Brooks, F. P. The Mythical Man-Month. Addison-Wesley, 1975 (anniversary edition 1995), ch. 2. Checked against a scan of chapter 2 at https://web.eecs.umich.edu/~weimerw/2018-481/readings/mythical-man-month.pdf
  5. Brooks, F. P. "No Silver Bullet: Essence and Accidents of Software Engineering." UNC Technical Report TR86-020, 1986. https://techreports.cs.unc.edu/papers/86-020.pdf
  6. Becker, J., Rush, N., Barnes, E., Rein, D. (METR). "Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity." 10 July 2025. https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/
  7. METR. "We are Changing our Developer Productivity Experiment Design." 24 February 2026. https://metr.org/blog/2026-02-24-uplift-update/
  8. Cui, Z., Demirer, M., Jaffe, S., Musolff, L., Peng, S., Salz, T. "The Effects of Generative AI on High-Skilled Work: Evidence from Three Field Experiments with Software Developers." Management Science, published online 27 February 2026. https://doi.org/10.1287/mnsc.2025.00535
  9. DORA (Google Cloud). "Announcing the 2025 DORA Report." September 2025. https://cloud.google.com/blog/products/ai-machine-learning/announcing-the-2025-dora-report
  10. Faros AI. "AI Engineering Report Q2 2026: The Acceleration Whiplash." 2026. https://faros.ai/research/ai-acceleration-whiplash
  11. Anthropic. "How AI is transforming work at Anthropic." December 2025. https://www.anthropic.com/research/how-ai-is-transforming-work-at-anthropic
  12. Jevons, W. S. The Coal Question. Macmillan, 1865 (2nd ed. 1866), ch. VII, "Of the Economy of Fuel." https://www.econlib.org/library/YPDBooks/Jevons/jvnCQ.html?chapter_num=9
  13. Bessen, J. "Automation and jobs: when technology boosts employment." Economic Policy 34(100), 2019, 589–626. https://doi.org/10.1093/epolic/eiaa001
  14. Retool. "The build vs. buy shift: how vibe coding and shadow IT have reshaped enterprise software" (2026 Build vs. Buy report). https://retool.com/blog/ai-build-vs-buy-report-2026
  15. Perez, S. "The App Store is booming again, and AI may be why." TechCrunch, 18 April 2026. https://techcrunch.com/2026/04/18/the-app-store-is-booming-again-and-ai-may-be-why/
  16. GitHub. "Octoverse: A new developer joins GitHub every second as AI leads TypeScript to #1." 28 October 2025. https://github.blog/news-insights/octoverse/octoverse-a-new-developer-joins-github-every-second-as-ai-leads-typescript-to-1/
  17. Veracode. "AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks." 30 July 2025. https://www.veracode.com/press-release/ai-generated-code-poses-major-security-risks-in-nearly-half-of-all-development-tasks-veracode-research-reveals/
  18. Spracklen, J., et al. "We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs." USENIX Security 2025. https://arxiv.org/html/2406.10279v3; and Churilov, A. "The Range Shrinks, the Threat Remains: Re-evaluating LLM Package Hallucinations on the 2026 Frontier-Model Cohort," arXiv 2605.17062, 2026 (single-author preprint, not peer reviewed).
  19. Stenberg, D. "The end of the curl bug-bounty." 26 January 2026. https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/; first reported by The Register, 21 January 2026, https://www.theregister.com/2026/01/21/curl_ends_bug_bounty/
  20. DeepLearning.AI, The Batch, issue 342. "Investors Panic Over Agentic AI." 27 February 2026. https://www.deeplearning.ai/the-batch/issue-342/
  21. Willison, S. "Writing code is cheap now." Agentic Engineering Patterns, 23 February 2026. https://simonwillison.net/guides/agentic-engineering-patterns/code-is-cheap/

All writing