Cool Bits
-
New npm supply chain attack just dropped. They’ve dubbed this one “Shai-Hulud” because the only way to escape it is to do a funky Crip Walk through the desert at night.
-
Auth0 built a complete auth solution for GenAI apps that gives you a secure token vault, authorization for async agents, and user auth that allows agents to identify your users. Try it for free today. [sponsored]
-
Bogdan Ionescu wrote about hosting a website on a disposable vape. That must be why those high school kids keep asking me to buy them vapes on my way into 7-11 every day.
-
Jake Archibald wrote about how fetch streams are great, but not for measuring upload/download progress.
-
GitHub just launched a new MCP registry, and it’s managed to go almost 24 hours without being hacked so far.
-
Sergiy Dybskiy wrote an article on the Sentry blog about the top-10 core KPIs of LLM performance and how to track them. [sponsored]
-
Michael Lynch wrote about his first impressions of Gleam – the Elixir-like programming language, not the scary glow-in-the-dark toothpaste I impulse-bought on Temu for $0.28.
-
RustGPT is a complete LLM implementation written in “pure Rust” with no external ML frameworks.
-
Mike and Oskar wrote about how to use Liquid Glass in React Native, so you can repeatedly trick your users into thinking they spilled water on their phones.
-
CarbonQA provides high-quality QA services for dev teams, so you’ll never have to test your own app again. Their US-based testers work in your tools, talk with your team on Slack, and let your devs be devs. [sponsored]
-
The Safari team wrote about all the new WebKit features in Safari 26.0.
-
Loren Stewart wrote about how React won by default and is killing frontend innovation – similar to how I won my third-grade science fair “by default” after all the other kids’ projects were mysteriously sabotaged the night before. Most unfortunate.
Cool Bits
-
New npm supply chain attack just dropped. They’ve dubbed this one “Shai-Hulud” because the only way to escape it is to do a funky Crip Walk through the desert at night.
-
Auth0 built a complete auth solution for GenAI apps that gives you a secure token vault, authorization for async agents, and user auth that allows agents to identify your users. Try it for free today. [sponsored]
-
Bogdan Ionescu wrote about hosting a website on a disposable vape. That must be why those high school kids keep asking me to buy them vapes on my way into 7-11 every day.
-
Jake Archibald wrote about how fetch streams are great, but not for measuring upload/download progress.
-
GitHub just launched a new MCP registry, and it’s managed to go almost 24 hours without being hacked so far.
-
Sergiy Dybskiy wrote an article on the Sentry blog about the top-10 core KPIs of LLM performance and how to track them. [sponsored]
-
Michael Lynch wrote about his first impressions of Gleam – the Elixir-like programming language, not the scary glow-in-the-dark toothpaste I impulse-bought on Temu for $0.28.
-
RustGPT is a complete LLM implementation written in “pure Rust” with no external ML frameworks.
-
Mike and Oskar wrote about how to use Liquid Glass in React Native, so you can repeatedly trick your users into thinking they spilled water on their phones.
-
CarbonQA provides high-quality QA services for dev teams, so you’ll never have to test your own app again. Their US-based testers work in your tools, talk with your team on Slack, and let your devs be devs. [sponsored]
-
The Safari team wrote about all the new WebKit features in Safari 26.0.
-
Loren Stewart wrote about how React won by default and is killing frontend innovation – similar to how I won my third-grade science fair “by default” after all the other kids’ projects were mysteriously sabotaged the night before. Most unfortunate.
发布者