The Hidden Cost of 'Free' Open Source in the Agentic Era

Enterprises treating open-source software as a zero-cost asset are operating under a fallacy that ignores the massive human labor required for maintenance, according to a report from Thoughtworks.

Writing on the "zero-cost fallacy," Chris Ford and Richard Gall highlight a systemic crisis where multi-billion dollar entities consume load-bearing open-source packages without contributing back. While distribution costs are negligible, the maintenance of the infrastructure supporting cloud platforms and digital banking is expensive and unsustainable. This imbalance has led to maintainer burnout and psychological harassment.

The rise of generative AI has intensified these pressures. Thoughtworks reports that maintainers are now besieged by "slop pull requests"—a flood of low-quality, AI-generated code that forces developers to spend their time as unpaid reviewers rather than writers. Furthermore, the trust model for open-source is degrading; libraries are skyrocketing to tens of thousands of GitHub stars within weeks, driven by viral hype around AI agents, despite having only a three-week commit history, while it is now also extremely cheap to raise malicious pull requests and AI agents are finding new attack vectors daily.

Efforts to correct this extraction economy through licensing have met mixed results. While permissive licenses like MIT and Apache enabled rapid adoption, they also allowed corporations to build proprietary empires on volunteer labor. Conversely, shifting to restrictive or dual-licensing models often triggers corporate boycotts or procurement bottlenecks. Thoughtworks cites Akka's transition to a license targeting organizations with over $100 million in revenue as an example where enterprises may choose to abandon a tool rather than comply with new licensing terms.