The OSS VRP — which paid out for bugs found across Google’s open-source ecosystem — will be frozen until at least next year. It’s slop’s fault: the pause is down to a “significant rise” in AI submissions, “the vast majority of which are not valid.” Linux has been suffering from a similar problem.