Home / Articles / The eyeballs get cheap / Versions / v1.2.0
The eyeballs get cheap: what changed in v1.2.0
From v1.1.0 (2026-10-15, e4a2670ec) to v1.2.0 (2026-10-27, db67c5ce1), paragraph by paragraph.
0 paragraphs added, 0 removed, 3 changed in place, 45 unchanged. About 0 words added and 110 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.
2 unchanged paragraphs
!shot ox-balance.webp | images/ | Open source against proprietary: the balance that justmoved moved. Open source had the source in view and paid for few reviews; proprietary had the budget and the cover of being hidden. Cheap, deep,when model-driven security review changesbecame onecheap sideand of that balance far more than the other.deep. | comparison
17 unchanged paragraphs, under In short {#in-short}, No clear winner, until now {#balance}, The eyeballs get cheap {#cheap}…
!shot ox-curl.webp | images/ | One project, one year of machine eyeballs: curl, from its maintainer's own posts. A bug bounty that found 87 vulnerabilities; a year of reports that were mostly noise; a first wave of AI-assisted reports that triggered hundreds of fixes; the end of the bounty; a frontier scan that found one bug; and, in October, deeper tools finding more. | comparison
10 unchanged paragraphs, under What changes for open source {#changes}, Three forces, one place {#forces}
!shot ox-forces.webp | images/ | Three forces meeting at the least code in production: opensecure, sourcesovereign becomingand verycommercially secure,maintained open source becoming required for sovereignty, and open source with commercial models that pay for maintenance. Where they meet is the customer running exactly the code they need, maintained by the people who know it best.source. | architecture
16 unchanged paragraphs, under The least code in production {#least-code}, What this does not claim {#limits}, Where this comes from {#sources}