

For software not exempted, the California Digital Age Assurance Act takes effect on 1 January 2027 for requiring age collection at device setup time and age-bracket signals for applications.
As a reminder, the law doesn’t require age verification, only attestation. It’s a really stupid law that accomplishes nothing for the services that now require age verification and nothing for the people opposed to it. It just makes some OSs (but apparently potentially no longer Android?) ask your age on account creation.
I still have no clue how this will work for Windows server (and the cursed Mac servers), but honestly it’s on you for using that over a Linux server.
It’s not a question of if anyone holds the copyright, but a question of whether the models themselves and their outputs are derivative works of the data the models were trained on.
If they are derivatives, it may be possible that the licenses of that training data place additional restrictions on the generated code or forbid derviative works outright.
Speaking practically, for a random “FOSS” project that isn’t very big, this is unlikely to ever come up. Courts would have to rule in favor of the training data owners, plus they would need to issue DMCA takedown requests and/or sue to have the content removed. That probably won’t happen.
However, you should probably question any project where the developers don’t understand the code well enough to write it themselves. I don’t know if that’s the case here, but that tends to be the case with vibecoded projects.