Mind boggling that supposed professionals in this thread will blame Claude and suggest a 100 different third party tools instead of reviewing code committed to a public repository.

Vibe coders don't review code, even if and when published to a public repo.

There’s one (wrong) reason to suggest that: the developers are just another trust layer between business objectives and business users, and there are affected third parties who do not have a say on how their data is processed. To protect the latter we have to consider how to minimize the risks along the supply chain, including how to reduce the damage from vibe coders. Why the answer is wrong? If safe path exists, the tooling should not be responsible or accountable, but tooling vendors can opt in to improve public safety. In this case safe path exists, Anthropic does reasonably good job to steer to it.