Anthropic's Free Security Scans Raise an Old Question: Who Tends Software Everyone Depends On?

Nobody checks the code that checks our banking, our maps, our medical records. Open-source software works that way — maintained by volunteers, relied on by nearly everyone, owned by no one. Anthropic's new service changes who can afford vigilance over that hidden scaffolding, and the mechanics of the change are worth noticing: it is opt-in, and it is periodic.

Those two details carry the meaning. Opt-in means the scanning only happens where someone deliberately asks for it. Periodic means it is not a one-time rescue but a rhythm — a discipline of looking closely, again and again, at something everyone uses and few inspect. That is what stewardship has always looked like in practice: not a single dramatic act of care, but the willingness to keep showing up for what we did not create and do not own. A garden, a neighborhood, a shared tradition, a codebase — the commons stays healthy through repetition, not heroics.

The process also exposes an older pattern we tend to forget. Most of the software modern life runs on was entrusted to many hands, and its security has depended on whoever happened to notice. A free scanning tool redistributes some of that burden — but only for projects that sign up, only as far as the tool's coverage reaches, and only as far as a company's own interests allow. It is a change in access, not proof that the commons is now safe. We cannot read generosity into the announcement any more than we can assume the gaps don't matter.

So the question Anthropic's service raises is not who will fix everything. No single caretaker, human or corporate, ever has. The older question stewardship asks is closer to home: what shared thing are we benefiting from right now without maintaining — and would we notice if no one else picked it up?