AI vulnerability discovery could make open source safer while overwhelming maintainers, exposing systemic dependencies, and reshaping the software ecosystem.