Something I keep thinking about while building LineageLens Trellis: LLMs hallucinate package names *consistently*. The same fake names recur across models and prompts. Attackers have started harvesting those names and registering them on npm/PyPI with malicious install hooks so when the next agent hallucinates `fastapi-utils-extra`, the install *succeeds*. The part that unsettles me is that it beats code review completely. The import looks normal, the lockfile resolves, nothing in the diff is wrong. The malicious code isn't in the diff it's on the registry, behind a name a model invented. We ended up treating dependency introduction as a separate trust event from code edits: registry checks (package age, release count) plus an offline edit-distance pass for typosquats like reqeusts`, tied back to *which agent session* introduced the name. But I'm genuinely curious what other makers do here. If you're using Copilot/Cursor/Claude Code daily does anything stand between the agent and `npm install` in your setup? Or is the agent fully trusted the moment it suggests a dependency?
We're locking in the launch window for LineageLens (open-source AI code provenance "git blame for AI-generated code") and I want to time it for when the most people are actually around, not just follow a generic playbook.
Trying to get this right, so I'd value real input from this crowd:
- Day of week which days do you see the most activity here? Mid-week, or does that just mean more competition for attention?
- Time of day is there a window where this community is most online? And does it skew US, Europe, or India?
About to launch Lineage Lens 2.0 on Product Hunt and I keep hitting the same wall everyone repeats the same playbook (Tue Thu, 12:01am PT) but the advice is years old and I can't tell what still holds.
So, asking the people who've actually done it recently:
1. 12:01am PT real edge still, or does a 7 9am PT push to a warm audience beat a cold midnight drop now?
2. Day of week is Tue/Wed/Thu still the sweet spot, or is it so crowded now that a "quieter" day wins on less competition?
Lineage LensTrack which lines of your code came from AI
Lineage Lens
