What Simon Willison thinks about HuggingFace

@simon-willison · 54 positions · On ppll ↗

Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.

Simon Willison did not write this page.

We collected these quotes from things they published elsewhere, and every quote links to where it was said. They have no account here and have not endorsed this site. Quotes are word for word; the short line under each one is our own restatement, not their wording. Their own site. Is this you? Claim it or ask us to remove it. Or tell us what is wrong here.

Filter HuggingFace · Newest first

Topic

All 54HuggingFace 1coding agents 12LLMs 12Anthropic 11OpenAI 6cybersecurity 4design 4prompt injection 4software quality 4

11 more topics

open source 3taste 3AI agents 2vibe coding 2behavioural science 1benchmarks 1data centers 1energy 1innovation 1journalism 1MCP 1

Sort

NewestOldest

Only Simon Willison on HuggingFace. See everyone on HuggingFace

1 dated position, 2026, in their own words. Our reading of what Simon Willison has said — not written or endorsed by them.

1 position so far — this page is not yet offered to search engines.

1. 12 Sept 2026, 00:42 UTC

   Our readingIf OpenAI really never told RubyGems of its agents' attack, either it failed to find it in its logs after later incidents or chose silence, and both are bad.

   OpenAI

   Their wordsIf that’s true there are two options: After the Hugging Face and Wiki attacks OpenAI were still unable to review their previous logs and determine that they had previously attacked RubyGems. They knew about the attack on RubyGems and made the decision not to reach out to the RubyGems team about it. Both of these are bad!

   ↗OpenAI agents attacked RubyGems back in Maysimonwillison.net