DEV Community: Adam

Builders, Coasters, and 30 Plugins Gone Rogue

Adam — Fri, 24 Apr 2026 04:49:33 +0000

Gergely Orosz surveyed 900+ software engineers and found three archetypes emerging in the AI era: builders, shippers, and coasters. The breakdown of who's thriving, who's just shipping faster, and who's quietly coasting is the most grounded portrait of the profession right now.

The bigger question is what comes next. James Stanier maps three scenarios for whether the traditional mentorship pipeline can survive an AI-compressed learning curve — and the answer matters for everyone at every level of seniority. Addy Osmani formalizes the new skill that will separate high-functioning AI teams from the rest: Agentic Engine Optimization — structuring your docs for agent discoverability, parsability, and token efficiency. Tim Davis names the fundamental shift: we're no longer building deterministic systems — we're assembling probabilistic ones, from code no single human designed end-to-end, reviewed under time pressure. The accountability questions that creates haven't been answered yet.

Orhun Parmaksiz makes the principled case against vibe-coding: letting AI handle the tedious parts while you keep only the interesting ones isn't a productivity hack — it's how craft and maintainability erode together. The practical complement: TkDodo's vertical codebase — stop organizing your codebase by technical type and start organizing by domain, so everything that belongs together actually lives together.

Christian Ekrem demonstrates how branded types and discriminated unions let TypeScript carry proof that validation already happened — no defensive if-checks scattered across files, zero runtime overhead.

Security brought two head-turners this week: someone purchased 30 WordPress plugins specifically to plant backdoors across the portfolio (the acquisition vector most threat models never account for), and Cal.com closed its main repository after five years of open source because AI can now find and exploit public vulnerabilities faster than maintainers can patch them. The security calculus for open-source projects has quietly shifted.

Jonathan Chart's index deep dive covers composite index order, partial indexes, functional indexes, and EXPLAIN — the fundamentals that turn mysterious slow queries into five-minute fixes.

Finally: GitHub Stacked PRs just went native with one-click merging and AI agent integration — the pattern that was too painful to adopt at scale has officially graduated to mainstream. And Google's Magika is now open source: AI-powered file type detection for 200+ content types, the same model powering Google's own user safety infrastructure.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 12 highlighted links of weeklyfoo #133:

The Impact of AI on Software Engineers in 2026

by Gergely Orosz

Survey of 900+ engineers reveals three archetypes - builders, shippers, coasters - and how AI tools affect each differently in cost, productivity, and professional identity

🚀 Read it!, ai, engineering

Agentic Engine Optimization (AEO)

by Addy Osmani

How to structure docs so AI coding agents can actually use them - discoverability, parsability, token efficiency, and access control

📰 Good to know, ai, engineering

Who Will Be the Senior Engineers of 2035?

by James Stanier

Three scenarios for how AI will reshape the way senior engineers emerge - and whether the traditional mentorship pipeline can survive

📰 Good to know, engineering, ai

Write Less Code, Be More Responsible

by Orhun Parmaksiz

Against the vibe-coding trend - why letting AI handle the tedious parts while you keep the fun ones is a recipe for quality and maintainability decline

📰 Good to know, ai, engineering

Parse, Don't Validate in TypeScript

by Christian Ekrem

Branded types and discriminated unions let TypeScript carry proof that validation already happened - no more defensive if checks scattered across files

📰 Good to know, typescript, javascript

30 WordPress Plugins Backdoored After Acquisition

by anchor.host

A buyer purchased 30 plugins of varying popularity and planted a backdoor in all of them - a supply chain attack via legitimate ownership

📰 Good to know, security

Things You Didn't Know About Indexes

by Jonathan Chart

Composite index order, partial indexes, functional indexes, and EXPLAIN - a practical deep dive on where indexes help and where they hurt

📰 Good to know, database, engineering

Cal.com Goes Closed Source After 5 Years

by Cal.com

AI can now rapidly find and exploit open-source vulnerabilities - Cal.com closes its main repo while releasing Cal.diy under MIT for hobbyists

📰 Good to know, open-source, engineering

The Vertical Codebase

by TkDodo

Stop splitting code by technical type (components, hooks, utils) - group by functionality instead so everything in a domain lives together regardless of type

📰 Good to know, engineering

Probabilistic Engineering and the 24-7 Employee

by Tim Davis

The shift from deterministic to probabilistic engineering - code generated by stochastic systems, reviewed under time pressure, assembled into wholes no single human ever designed end-to-end

📰 Good to know, engineering, ai

GitHub Stacked PRs

by GitHub

Native stacked PR workflow - break large changes into small reviewable pull requests and merge the whole stack in one click, with AI agent integration

🧰 Tools, git, github, tools

Magika

by Google

Google's AI-powered file type detection that identifies 200+ content types using a lightweight deep learning model - used internally for user safety

🧰 Tools, ai, tools, github

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #133

Adam — Mon, 20 Apr 2026 04:57:10 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #133 is here: your weekly digest of all webdev news you need to know! This time you'll find 36 valuable links in 4 categories! Enjoy!

🚀 Read it!

The Impact of AI on Software Engineers in 2026: Survey of 900+ engineers reveals three archetypes - builders, shippers, coasters - and how AI tools affect each differently in cost, productivity, and professional identity by Gergely Orosz / ai, engineering / 16 min read

📰 Good to know

Agentic Engine Optimization (AEO): How to structure docs so AI coding agents can actually use them - discoverability, parsability, token efficiency, and access control by Addy Osmani / ai, engineering / 16 min read
How Complex Is My Code?: Code complexity beyond algorithmic efficiency - human cognitive effort, psycholinguistic insights, and why metrics are better for prioritizing refactoring than measuring quality by Phil / engineering / 13 min read
Why MDN Was Rebuilt Without React: React was just a wrapper around static content - MDN now uses a custom render pipeline and Lit web components by MDN / frontend, engineering / 33 min read
Moving Railway's Frontend Off Next.js: Railway migrated 200+ routes from Next.js to Vite and TanStack Router with zero downtime - faster builds, better type safety, and a simpler client-side architecture by Railway / frontend, engineering / 7 min read
Uber's Agentic System for Instant Design Specs: How Uber built an agentic pipeline to automate design spec generation in minutes, cutting manual handoff work between designers and engineers by Ian Guisard / ai, design / 13 min read
Who Will Be the Senior Engineers of 2035?: Three scenarios for how AI will reshape the way senior engineers emerge - and whether the traditional mentorship pipeline can survive by James Stanier / engineering, ai / 16 min read
Write Less Code, Be More Responsible: Against the vibe-coding trend - why letting AI handle the tedious parts while you keep the fun ones is a recipe for quality and maintainability decline by Orhun Parmaksiz / ai, engineering / 6 min read
The Hidden Cost of Building Workflow Editors: Build vs buy analysis for React Flow-based editors - custom node state, undo/redo, and real-time sync pile up faster than teams expect by workflowbuilder.io / engineering, frontend / 10 min read
TanStack Start Gets RSC But Not Like Next.js: Client-owned tree, server functions via createServerFn only, and RSC as a plain React Flight stream you fetch with TanStack Query - a genuinely different approach than Next.js by TanStack / frontend, engineering / 19 min read
Parse, Don't Validate in TypeScript: Branded types and discriminated unions let TypeScript carry proof that validation already happened - no more defensive if checks scattered across files by Christian Ekrem / typescript, javascript / 13 min read
SVG Filters Guide: Getting Started with the Basics: Filter regions, color interpolation, and cross-browser consistency - a solid primer on a power feature most devs skip by Ana Tudor / css, frontend / 18 min read
Squash and Stretch on the Web: Disney animation principles applied to web motion - how squash and stretch adds polish and physicality to UI interactions by Josh W. Comeau / css, frontend / 15 min read
Why AI Sucks at Front End: AI design is trained on ancient solutions and unoriginal UI patterns - Adam Argyle's rant on why AI still can't do frontend well by Adam Argyle / ai, frontend / 14 min read
30 WordPress Plugins Backdoored After Acquisition: A buyer purchased 30 plugins of varying popularity and planted a backdoor in all of them - a supply chain attack via legitimate ownership by anchor.host / security / 10 min read
Things You Didn't Know About Indexes: Composite index order, partial indexes, functional indexes, and EXPLAIN - a practical deep dive on where indexes help and where they hurt by Jonathan Chart / database, engineering / 12 min read
Cal.com Goes Closed Source After 5 Years: AI can now rapidly find and exploit open-source vulnerabilities - Cal.com closes its main repo while releasing Cal.diy under MIT for hobbyists by Cal.com / open-source, engineering / 19 min read
What We Learned Building a Rust Runtime for TypeScript: Encore's experience replacing the Node.js runtime with a custom Rust-based one for TypeScript - tradeoffs, surprises, and lessons by Ivan Cernja / engineering, typescript / 18 min read
The Vertical Codebase: Stop splitting code by technical type (components, hooks, utils) - group by functionality instead so everything in a domain lives together regardless of type by TkDodo / engineering / 11 min read
Probabilistic Engineering and the 24-7 Employee: The shift from deterministic to probabilistic engineering - code generated by stochastic systems, reviewed under time pressure, assembled into wholes no single human ever designed end-to-end by Tim Davis / engineering, ai / 22 min read
Design and Engineering, as One: Most teams still use an 1898 industrial model that separates design from engineering - a case for deeper integration beyond better handoff processes by Matthias Ott / design, engineering / 30 min read
Cloudflare Email Service: Now in public beta. Ready for your agents by Thomas Gauvin, Eric Falcão / emails, cloudflare / 13 min read

🧰 Tools

Multica: Open-source platform integrating AI coding agents into dev teams as autonomous teammates - they claim tasks, write code, and report progress via a Go-based local daemon by multica.ai / ai, tools, github
Letta Code: Memory-first coding harness for long-lived AI agents that persist across sessions and accumulate skills like a permanent teammate by docs.letta.com/letta-code / ai, tools, github
GitHub Stacked PRs: Native stacked PR workflow - break large changes into small reviewable pull requests and merge the whole stack in one click, with AI agent integration by GitHub / git, github, tools
Delphitools: 40+ simple online tools with no logins or tracking - SVG optimizer, Tailwind shade generator, background remover, palette generator, and more by Ruby Morgan Voigt / tools
Magika: Google's AI-powered file type detection that identifies 200+ content types using a lightweight deep learning model - used internally for user safety by Google / ai, tools, github
Pompelmi 1.0: Antivirus File Scanning from Node: ClamAV wrapper for scanning malicious uploads in Node apps - standalone, no daemon required, spawns ClamAV on-demand by pompelmi contributors / javascript, tools, security
Micro-ML: Forecasting and Clustering for Node: 56KB WASM-powered library with regression, smoothing, clustering, and classification - no TensorFlow.js needed by Adam Perliński / javascript, tools, github
Hyperframes: Open-source HTML-based video rendering framework with first-class AI agent support - non-interactive CLI for agent-driven workflows, renders to MP4 locally or in Docker by HeyGen / tools, ai, github
Typescale AI: Typography scale and design token generator - creates consistent text hierarchies from H1 to H6 and body text with design token output by typescale.ai / design, tools
Animata: ~200 animation-focused React components built with Tailwind CSS - animated beams, spreading cards, glitching text, Slack-style hero screen by Codse / react, tools
Marky: A lightweight easy to use markdown viewer by Garrett Graves / markdown

🤪 Fun

100 Jumps: Jump without missing - a small physics-based browser game by boredzebra.com / fun, game / 1 min read
Chess in Pure SQL: A fully playable chess game rendered and run entirely with SELECT and UPDATE statements - no app server, no JavaScript, just SQL by dbpro.app / fun, sql / 5 min read
Slitscanner: Upload an image, set scan settings, move it around - creates slit-scan photography distortion art, neat for background images by Matt Soria / fun, art / 3 min read

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Vibe Wars, Leaked Prompts, npm Under Siege

Adam — Fri, 17 Apr 2026 04:44:28 +0000

Martin Fowler and Kent Beck have joined forces to examine the AI disruption — and they're in agreement: this one is categorically different from Agile and OOP in magnitude and speed. When the two architects who helped define modern software engineering land on the same page, you slow down and read it.

The vibe coding debate found its sharpest edges this week. DHH has abandoned keyboard-first coding for a dual-AI tmux setup and barely writes code by hand anymore — with no quality regression reported. Bram Cohen has some thoughts: fully delegating code to AI without reading the output isn't a philosophy, it's a technical debt subscription with deferred payment terms. Both positions are defensible — which is the most unsettling thing about it.

Drew Breunig dissected the accidental Claude Code source leak to map exactly which context components are always vs conditionally included in its system prompt — the most revealing look at professional context engineering from inside a major AI tool that anyone outside Anthropic has published. Martin Fowler wrote the practical companion piece: how to encode your team's conventions into CLAUDE.md, linters, and CI so agents generate code that already passes review without constant correction.

Also in this issue: Konrad Piechowski's five git commands that map a codebase's health, bug clusters, and shipping confidence before you open a single file — an immediately adoptable pre-reading ritual.

Security this week deserves two reads: Dani Akash makes the case for a single package manager config change that blocks fast-moving supply chain attacks before they propagate, and socket.dev documents active social engineering campaigns specifically targeting high-value npm maintainers. Every package publisher should know these techniques before becoming the next target.

Tools this week: dryrun feeds AI agents a Postgres schema snapshot instead of a live database connection, Caveman strips filler words to cut Claude Code token usage by 65%, Boneyard auto-generates pixel-perfect skeleton screens straight from your DOM, and Little Snitch finally comes to Linux.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 12 highlighted links of weeklyfoo #132:

DHH's New Way of Writing Code

by Gergely Orosz

DHH switched from typing all his code to running two AI models in tmux — now he barely writes any code by hand, while his quality standards haven't budged

🚀 Read it!, ai, engineering

Cycles of Disruption in the Tech Industry

by Gergely Orosz

Martin Fowler and Kent Beck compare the AI shift to Agile and OOP — and explain why this time it's different in magnitude and speed

📰 Good to know, ai, engineering

Minimum Release Age is an Underrated Supply Chain Defense

by Dani Akash

A single package manager config change that can block fast-moving supply chain attacks before they reach your project

📰 Good to know, security, npm

The Cult of Vibe Coding Is Insane

by Bram Cohen

Fully delegating code to AI without reading the output is not a development philosophy, it's a debt factory — AI is only effective when humans actively review and guide it

📰 Good to know, ai, engineering

Encoding Team Standards

by Martin Fowler

Practical patterns for putting your team's conventions into CLAUDE.md, linters, and CI so AI agents generate code that passes review without constant correction

📰 Good to know, ai, engineering

How Claude Code Builds a System Prompt

by Drew Breunig

The accidental source code leak reveals how Claude Code assembles its context — some components always included, others conditional — showing just how complex context engineering has become

📰 Good to know, ai, engineering

The Git Commands I Run Before Reading Any Code

by Konrad Piechowski

Five git commands that reveal a codebase's story before you open a single file — who built it, where bugs cluster, whether a team ships with confidence or tiptoes around landmines

📰 Good to know, git, engineering

Attackers Hunting High-Impact Node.js Maintainers

by socket.dev

Ongoing social engineering campaigns targeting npm package maintainers — know these techniques before you become a target

📰 Good to know, security, nodejs

dryrun

by Radim Marek

Offline-first Postgres MCP server — lets AI agents access what they need from your database using a JSON snapshot, never a live connection

🧰 Tools, postgres, mcp, ai

Caveman

by Julius Brussee

Claude Code skill and Codex plugin that compresses LLM communication by stripping filler words while maintaining technical accuracy — cuts token usage by an average of 65%

🧰 Tools, ai, claude, tools

Little Snitch for Linux

by Objective Development

The beloved macOS network monitor finally comes to Linux — see every hidden app network connection, block unwanted traffic, manage blocklists, write custom rules, and view detailed traffic history

🧰 Tools, linux, security

Boneyard

by 0xGF

Snapshots your DOM and auto-generates pixel-perfect skeleton screens — no manual placeholders, supports React, Vue, Svelte, and Angular

🧰 Tools, react, ui

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #132

Adam — Mon, 13 Apr 2026 04:40:30 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #132 is here: your weekly digest of all webdev news you need to know! This time you'll find 36 valuable links in 5 categories! Enjoy!

🚀 Read it!

DHH's New Way of Writing Code: DHH switched from typing all his code to running two AI models in tmux — now he barely writes any code by hand, while his quality standards haven't budged by Gergely Orosz / ai, engineering / 11 min read

📰 Good to know

Cycles of Disruption in the Tech Industry: Martin Fowler and Kent Beck compare the AI shift to Agile and OOP — and explain why this time it's different in magnitude and speed by Gergely Orosz / ai, engineering / 13 min read
How to Use HTML Video and Audio Lazy-Loading: HTML video and audio lazy loading is now a web standard in Chrome 148, with Firefox and WebKit implementations close behind by Scott Jehl / html, performance / 12 min read
What to Know in JavaScript (2026 Edition): A comprehensive map of the JavaScript landscape today — ECMAScript 2025/2026 additions, frameworks, runtimes, and build tools by Chris Coyier / javascript / 27 min read
Claude Is Not Your Architect. Stop Letting It Pretend: AI agents are agreeable pattern-matchers that produce generic designs without understanding your real constraints — and nobody owns the result when things break by hollandtech.net / ai, engineering / 10 min read
Minimum Release Age is an Underrated Supply Chain Defense: A single package manager config change that can block fast-moving supply chain attacks before they reach your project by Dani Akash / security, npm / 11 min read
Good APIs Age Slowly: Robust APIs prioritize long-term stability by establishing explicit boundaries and avoiding exposure of internal details — the disciplined approach that turns your API into reliable infrastructure by Yusuf Aytas / engineering / 8 min read
What Is CSS Containment and How Can I Use It?: Harry Roberts explains CSS containment from first principles — a long-available but underused feature that lets browsers skip layout, paint, and style recalculations for isolated subtrees by Harry Roberts / css, performance / 20 min read
The Cult of Vibe Coding Is Insane: Fully delegating code to AI without reading the output is not a development philosophy, it's a debt factory — AI is only effective when humans actively review and guide it by Bram Cohen / ai, engineering / 7 min read
Encoding Team Standards: Practical patterns for putting your team's conventions into CLAUDE.md, linters, and CI so AI agents generate code that passes review without constant correction by Martin Fowler / ai, engineering / 15 min read
What Is Inference Engineering?: A new engineering discipline is emerging around deploying and optimizing LLMs at scale — Gergely maps what inference engineering actually involves and why teams need it by Gergely Orosz / ai, engineering / 40 min read
How Claude Code Builds a System Prompt: The accidental source code leak reveals how Claude Code assembles its context — some components always included, others conditional — showing just how complex context engineering has become by Drew Breunig / ai, engineering / 11 min read
The Git Commands I Run Before Reading Any Code: Five git commands that reveal a codebase's story before you open a single file — who built it, where bugs cluster, whether a team ships with confidence or tiptoes around landmines by Konrad Piechowski / git, engineering / 5 min read
State of Prototyping: Spring 2026 Report: 1,478 designers surveyed — Claude is now the #2 weekly design tool after Figma, 43.8% spend more than half their time vibe coding, and heavy vibe coders rate job satisfaction 7.39 vs 5.93 for non-vibe coders by Tommy (UX Tools) / ai, design / 13 min read
CSS Subgrid Is Super Good: A practical guide to using CSS subgrid (available across browsers since 2023) for laying out content from CMS systems you don't fully control by David Bushell / css / 6 min read
CSS position:sticky Can Now Track the Nearest Scroll Container per Axis: A nine-year CSS spec issue is resolved — sticky elements can now track different scroll containers horizontally and vertically, enabling previously impossible layouts, landing in Chromium first by Bramus Van Damme / css / 10 min read
light-dark() Is About to Support Images: The CSS light-dark() function is expanding beyond color values to handle images too — swap light and dark mode backgrounds with a single declaration, landing in Chromium and Firefox soon by Bramus Van Damme / css / 10 min read
Attackers Hunting High-Impact Node.js Maintainers: Ongoing social engineering campaigns targeting npm package maintainers — know these techniques before you become a target by socket.dev / security, nodejs / 12 min read

🧰 Tools

view-transitions-toolkit: Utility functions for working with View Transitions — patterns, helpers, and demos collected from Bramus's years of experimentation by Bramus Van Damme (Google) / css, animation
dryrun: Offline-first Postgres MCP server — lets AI agents access what they need from your database using a JSON snapshot, never a live connection by Radim Marek / postgres, mcp, ai
rpg: A psql-compatible Postgres terminal written in Rust with built-in DBA diagnostics and an AI assistant by Nik Samokhvalov / postgres, rust, cli
Fuse.js 7.3: Lightweight fuzzy-search library — v7.3 adds per-term fuzzy matching and static single-string matching, zero backend required by Kiro Risk / javascript, search
Xilem: Experimental high-performance reactive UI framework for Rust inspired by React and SwiftUI by Linebender / rust, ui
Hippo Memory: Biologically-inspired memory system for AI agents that prevents context loss through memory decay and consolidation — hybrid search and multi-tool management for more adaptive agents by Keith So / ai, memory
Caveman: Claude Code skill and Codex plugin that compresses LLM communication by stripping filler words while maintaining technical accuracy — cuts token usage by an average of 65% by Julius Brussee / ai, claude, tools
Gemma Gem: Chrome extension that runs Google's Gemma 4 model entirely on-device via WebGPU — no API keys, no cloud, no data leaving your machine by Yaniv Kessler / ai, chrome
human.json: Machine-readable file for documenting the humans behind a website — a structured JSON alternative to the classic humans.txt by Beto Dealmeida / tools
Little Snitch for Linux: The beloved macOS network monitor finally comes to Linux — see every hidden app network connection, block unwanted traffic, manage blocklists, write custom rules, and view detailed traffic history by Objective Development / linux, security
Skrun: Open-source platform for deploying Agent Skills as callable API endpoints — multi-model support, stateful memory, and tool invocation via local scripts or MCP servers by skrun-dev / ai, agents, mcp
TinyTTS: Fast English text-to-speech for Node.js and Python with a 3.4MB model — CPU-only, no cloud dependency by tronghieuit / tts, ai, node
Boneyard: Snapshots your DOM and auto-generates pixel-perfect skeleton screens — no manual placeholders, supports React, Vue, Svelte, and Angular by 0xGF / react, ui
dev-browser: A Claude Skill to give your agent the ability to use a web browser by Sawyer Hood / ai, claude, browsers
Agent Skills: Production-grade engineering skills for AI coding agents. by Addy Osmani / ai, claude, skills
Awesome DESIGN.md: A collection of DESIGN.md files inspired by popular brand design systems. Drop one into your project and let coding agents generate a matching UI. by VoltAgent / ai, design

🤪 Fun

CSS or BS: Test your CSS knowledge by guessing whether each property name is real or completely made up — trickier than it looks by Keith Cirkel / css / 8 min read

📺 Videos

React Paris 2026 Talks: 23 talks from React Paris 2026 now on YouTube by React Paris / react, conference

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Agents in a Box, npm on Fire

Adam — Fri, 10 Apr 2026 05:03:06 +0000

This week's theme is basically: AI agents are eating the world, and the world is starting to eat back.

Daniel Miessler drops his April AI synthesis — the quarterly anchor you need when the field is moving faster than your git pull. Joel Andrews offers the honest counterpoint with some uncomfortable truths about AI coding agents in real production environments. And Drew Breunig maps the shift from agentic experiments to spec-driven idiosyncratic tooling — the clearest mental model for where we go from here.

Meanwhile, Haseeb Qureshi dug through the full 1,900-file TypeScript leak of the Claude Code source to reverse-engineer how it actually works — the most revealing accidental transparency from any AI lab this year. The security side of the week is busy: axios versions on npm were quietly installing remote access trojans (audit your dependencies, now), and the ecosystem responded with two serious containment tools — Stanford's jai brings kernel-level jailing for AI agents, while nono adds cryptographic immutable audit chains and atomic rollback. If you're running agents in production, both are worth a look.

Also in this issue: 113 hard-won engineering lessons from Jack Kinsella on scaling a monolith to a million lines of code, pgmicro reimplements PostgreSQL semantics on top of SQLite storage in-process (technically audacious), and git-lrc gives you free AI code reviews on every commit with zero friction.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 10 highlighted links of weeklyfoo #131:

Inside the Claude Code source

by Haseeb Qureshi

Anthropic's Claude Code CLI source code leaked onto GitHub recently. All of it. About 1,900 files and a lot of TypeScript.

🚀 Read it!, claude

The Most Important Ideas in AI Right Now (April 2026)

by Daniel Miessler

Self-improvement and transparency change everything in unexpected ways

📰 Good to know, ai, engineering

Some uncomfortable truths about AI coding agents

by Joel Andrews

I’ve been following the development of generative AI closely for several years now.

📰 Good to know, ai

Scaling a Monolith to 1M LOC

by Jack Kinsella

113 Pragmatic Lessons from Tech Lead to CTO

📰 Good to know, engineering

axios Compromised on npm

by Ashish Kurmi

Malicious Versions Drop Remote Access Trojan

📰 Good to know, security, axios

The 2nd Phase of Agentic Development

by Drew Breunig

Yesterday we talked about how cheap code is fueling an era of idiosyncratic tooling, and previously we’ve talked about the rise of spec driven development.

📰 Good to know, ai, engineering

pgmicro

by Glauber Costa

An in-process reimplementation of PostgreSQL, backed by a SQLite-compatible storage engine

🧰 Tools, postgres, sqlite

jai

by stanford-scs

Jail your AI agent

🧰 Tools, ai

nono

by nono.sh

Kernel-enforced agent sandbox. Capability-based isolation with secure key management, atomic rollback, cryptographic immutable audit chain of provenance. Run your agents in a zero-trust environment.

🧰 Tools, ai, sandbox

git-lrc

by hexmos.com

Free, Unlimited AI Code Reviews That Run on Commit

🧰 Tools, ai, git, reviews

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

AI coding agents nail the code. They break on the scaffolding.

Adam — Mon, 06 Apr 2026 05:28:16 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

When AI coding agents fall short, the failure is almost never "it generated bad code." The failure is everything else — the environment state, the implicit decisions baked into a config three years ago, the reason that dependency is pinned to that version.

Joel Andrews published one of the more grounded take-downs of AI coding agents this week. Not a hype piece in either direction — just a practitioner's account of where these tools consistently fall apart in real production environments. The pattern he describes maps to something Daniel Miessler flagged in his April AI synthesis: most of what developers call "work" was actually maintaining an elaborate, fragile state required for work to happen. The AI exposed it by stumbling directly into it.

This is what "scaffolding" means in practice. Your agent can write a correct function. It cannot know why your test suite is configured with that specific mock, or why a particular environment variable gets overridden in staging but not local. That context lives in heads and in Slack threads and in the institutional memory of whoever set it up in 2022. The model doesn't have it.

Drew Breunig's framing of the second phase of agentic development makes more sense through this lens. Phase one was: can the AI generate code? (Yes, mostly.) Phase two is: can the agent operate within the scaffolding well enough to do something useful end-to-end? The answer right now is: inconsistently, and the variance is high. Spec-driven development isn't just a prompt engineering trick — it's an attempt to externalize the scaffolding into something the agent can read.

What's encouraging is that we're getting honest data now. The honeymoon period where everything was demos and benchmarks is ending. Practitioners are writing up where it works and where it doesn't, and the failure modes are getting specific enough to be actionable.

Some uncomfortable truths about AI coding agents — grounded production observations from Joel Andrews on where agents consistently fall short, with specifics that let you actually plan around them

The 2nd Phase of Agentic Development — Drew Breunig's model for the phase shift from "can it code?" to spec-driven idiosyncratic tooling

The Most Important Ideas in AI Right Now (April 2026) — Daniel Miessler's quarterly synthesis, worth reading for the self-improvement and transparency threads that contextualize where the capability ceiling actually sits

Inside the Claude Code source — Haseeb Qureshi's reverse-engineering of the Claude Code CLI from the full TypeScript leak; seeing the internals clarifies how the scaffolding problem is being handled at the tool level

The next useful thing the AI tooling community could build isn't a better code generator. It's better scaffolding capture — structured context files, agent instructions, decision logs that encode why the codebase is the way it is. The teams building that layer now will get substantially more out of agents than teams that keep treating them as fast autocomplete.

Want to read more? Check out the full issue here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

TypeScript 6 Ships, Agents Remember, IDEs Panic Quietly

Adam — Sat, 04 Apr 2026 11:11:10 +0000

TypeScript 6.0 is officially out — native ES module output by default, sweeping type system upgrades, and a must-read before it starts appearing in your dependency trees.

The big AI debate this week: Daniel Miessler builds the most complete argument yet for why AI will replace knowledge work — and somehow makes it sound like good news. Meanwhile, Addy Osmani makes the case that agentic orchestration is already eating the IDE's lunch — if your workflow still centers on a code window, this might be the signal you've been waiting for.

On the agent tooling front: Simon Willison breaks down Claude Code's new auto mode, which removes permission friction and quietly redefines what "agentic" means in daily practice. Mozilla dropped an open standard for shared agent learning called cq — so agents can stop rediscovering the same failures in parallel. And Cog bakes persistent memory and self-reflection directly into Claude Code projects, because amnesia is a terrible trait in a coding assistant.

Also this week: James Garbutt and the e18e community pinpoint exactly three architectural patterns responsible for the bulk of JavaScript bloat — a surgical diagnosis that finally makes the fix feel actionable. In the counterintuitive result of the week, someone rewrote their Rust WASM parser in TypeScript and it ran 3x faster — the right algorithm, as always, beats the right language. Storybook gains an MCP server so AI agents can browse and generate components directly. Stripe Projects quietly lays the infrastructure for the agentic economy. And Sugar High is a syntax highlighter under 1KB gzipped — the kind of tool that does exactly one thing and nothing else.

For lighter reading: Andrew Nesbitt assembled the top 10 open source conspiracies with just enough factual backup to make you genuinely uncomfortable. And fifteen engineering leaders pool their real-world AI workflows into one essential guide.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 13 highlighted links of weeklyfoo #130:

How to Do AI-Assisted Engineering

by Gregor Ojstersek

15 experienced engineers and engineering leaders share their real-world experiences with AI-assisted engineering.

🚀 Read it!, ai, engineering

Exactly Why and How AI Will Replace Knowledge Work

by Daniel Miessler

And why this is actually a good thing

📰 Good to know, ai, engineering

The Three Pillars of JavaScript Bloat

by James Garbutt

Over the last couple of years, we’ve seen significant growth of the e18e community and a rise in performance focused contributions because of it.

📰 Good to know, javascript, bloat

Is the IDE dead?

by Addy Osmani

How Agent orchestration is replacing the editor as the center of developer work

📰 Good to know, ai, ide

Announcing TypeScript 6.0

by Daniel Rosenwasser

Today we are excited to announce the availability of TypeScript 6.0!

📰 Good to know, typescript

Rewriting our Rust WASM Parser in TypeScript

by Thesys Engineering Team

We rewrote our Rust WASM Parser in TypeScript - and it got 3x Faster

📰 Good to know, wasm, typescript

Auto mode for Claude Code.

by Simon Willison

Really interesting new development in Claude Code today as an alternative to --dangerously-skip-permissions

📰 Good to know, claude, ai

The Top 10 Biggest Conspiracies in Open Source

by Andrew Nesbitt

This is gold!

📰 Good to know, oss

Storybook MCP for React

by Kyle Gach

Storybook-powered agentic UI development

📰 Good to know, storybook, ai, mcp

cq

by Mozilla

An open standard for shared agent learning. Agents persist, share, and query collective knowledge so they stop rediscovering the same failures independently.

🧰 Tools, ai, memory

Sugar High

by Jiachi Liu

Super lightweight code syntax highlighter, around 1KB after minified and gzipped

🧰 Tools, syntax, highlight

Stripe Projects

by Stripe

Stripe Projects lets you or your agents provision multiple services, generate and store credentials, and manage usage and billing from the CLI. Set up hosting, databases, auth, AI, analytics, and more in a few commands

🧰 Tools, stripe, ai, infra

Cog

by Marcio Puga

Cognitive architecture for Claude Code — persistent memory, self-reflection, and foresight

🧰 Tools, ai, memory, claude

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #130

Adam — Mon, 30 Mar 2026 04:55:17 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #130 is here: your weekly digest of all webdev news you need to know! This time you'll find 39 valuable links in 5 categories! Enjoy!

🚀 Read it!

How to Do AI-Assisted Engineering: 15 experienced engineers and engineering leaders share their real-world experiences with AI-assisted engineering. by Gregor Ojstersek / ai, engineering / 41 min read

📰 Good to know

Why your next mobile app is probably headless: For years, companies fought to get their icon on your phone. by Tuan-Anh Tran / engineering / 5 min read
Exactly Why and How AI Will Replace Knowledge Work: And why this is actually a good thing by Daniel Miessler / ai, engineering / 39 min read
The Three Pillars of JavaScript Bloat: Over the last couple of years, we’ve seen significant growth of the e18e community and a rise in performance focused contributions because of it. by James Garbutt / javascript, bloat / 14 min read
How I'm Productive with Claude Code: Automating the grunt work, Killing the wait, Let Claude see what happens by Neil Kakkar / claude / 7 min read
Is the IDE dead?: How Agent orchestration is replacing the editor as the center of developer work by Addy Osmani / ai, ide / 9 min read
These coders want AI to take their jobs: Vibe coding and what it means for the future of programming, explained. by Ariana Aspuru, Sean Rameswaram / ai, engineering / 13 min read
Announcing TypeScript 6.0: Today we are excited to announce the availability of TypeScript 6.0! by Daniel Rosenwasser / typescript / 36 min read
Rewriting our Rust WASM Parser in TypeScript: We rewrote our Rust WASM Parser in TypeScript - and it got 3x Faster by Thesys Engineering Team / wasm, typescript / 8 min read
Auto mode for Claude Code.: Really interesting new development in Claude Code today as an alternative to --dangerously-skip-permissions by Simon Willison / claude, ai / 5 min read
The Great CSS Expansion: CSS now does what Floating UI, GSAP ScrollTrigger, Framer Motion, and react-select used to require JavaScript for. by Pavel Laptev / css / 22 min read
Sneaky Header Blocker Trick: One of the coolest transitions on this blog. by Josh Comeau / css / 9 min read
SVG favicons that respect theme preference: Style your SVGs! by Paweł Grzybek / svg / 4 min read
The Top 10 Biggest Conspiracies in Open Source: This is gold! by Andrew Nesbitt / oss / 15 min read
Storybook MCP for React: Storybook-powered agentic UI development by Kyle Gach / storybook, ai, mcp / 4 min read

🧰 Tools

Arrow.js: The first UI framework for the agentic era — tiny, performant, with WASM sandboxes for safe code execution. by arrow-js.com / ui
Shadify: Stream AI generated Shadcn components, not just text. by shadify.copilotkit.ai / ai, ui
Claude Code Cheat Sheet: Summarized on one page by storyfox.cz / claude
cq: An open standard for shared agent learning. Agents persist, share, and query collective knowledge so they stop rediscovering the same failures independently. by Mozilla / ai, memory
OpenUI: The Open Standard for Generative UI by openui.com / ui, ai
Sugar High: Super lightweight code syntax highlighter, around 1KB after minified and gzipped by Jiachi Liu / syntax, highlight
Gridland: Terminal apps that run anywhere - even the browser! by Thoughtful / ui
Email.md: Render markdown into email-safe HTML by emailmd.dev / emails, markdown
pgtui: Postgres TUI client that handles basic CRUD operations on databases. by Kris Warner / postgres, cli, tui
docmd: Generate minimal, fast & beautiful docs from Markdown. No React, no bloat, just content. Built for developers. by docmd.io / docs
Tooscut: A powerful NLE editor with GPU compositing, keyframe animation, and real-time preview. No installs required. by Mohamad Mohebifar / video, tools
Elena: Elena is a simple, tiny library for building Progressive Web Components. by elenajs.com / pwa
Gea: A batteries-included, reactive JavaScript UI framework. No virtual DOM. Compile-time JSX transforms. Proxy-based stores. Surgical DOM patching. by Armagan Amcalar / javascript, framework
Optio: Workflow orchestration for AI coding agents, from task to merged PR. by Jon Wiggins / ai, orchestration
visual-json: The Visual JSON Editor. Schema-aware, embeddable, extensible. by Vercel / json, viewer
knex.js: A query builder for PostgreSQL, MySQL, CockroachDB, SQL Server, SQLite3 and Oracle, designed to be flexible, portable, and fun to use. by knexjs.org / sql
Stripe Projects: Stripe Projects lets you or your agents provision multiple services, generate and store credentials, and manage usage and billing from the CLI. Set up hosting, databases, auth, AI, analytics, and more in a few commands by Stripe / stripe, ai, infra
Cog: Cognitive architecture for Claude Code — persistent memory, self-reflection, and foresight by Marcio Puga / ai, memory, claude
React Joyride: Create guided tours in your apps by Gil Barbara / react, tours
Semiotic: A data visualization for AI and Streaming by semiotic.nteract.io / visualization
Stroke: Create Hand-drawn SVG animations for logos, signatures, and illustrations. by Abhishek / drawings, animation

🤪 Fun

Web Rewind: An interactive journey through 30 years of the web by Opera / web, rewind / 1 min read
Github Space Shooter: Visualizes GitHub contribution graphs as Space Shooter! by Zane Chen / shooter, gif / 1 min read

📺 Videos

How to burn $30m on a JavaScript framework...: The famo.us rendering engine was supposed to change web dev forever back in 2012. by Fireship / javascript, famo

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Agents Slow Down, useEffect Axed, VMs Go Instant

Adam — Fri, 27 Mar 2026 06:18:08 +0000

The headline this week belongs to Gergely Orosz, who asks the uncomfortable question: are AI agents actually slowing us down? The answer — more bugs, more outages, slower shipping velocity — comes with a clear diagnosis and a framework for what teams need to do differently.

Matteo Collina sees software engineering fracturing into three distinct roles as AI shifts the bottleneck from writing code to exercising judgment — time to figure out which lane you're in. Addy Osmani names the invisible tax every team shipping AI-generated code is already paying: comprehension debt — the widening gap between code that ships and code anyone can actually understand. And Apen Warr makes the provocative case that every extra approval gate compounds into a 10× velocity drag, quietly killing the teams that rely on them.

Over at Factory, they made a clean break: useEffect is banned. Entirely. The reasoning is compelling enough to make every React developer reconsider their defaults.

On the tools front: snipgrapher turns any code file into a shareable, syntax-highlighted image with one CLI call — another gem from Matteo Collina. Vercel open-sourced OpenReview, a self-hosted AI code review bot for teams that prefer not routing their entire codebase through someone else's SaaS. Starwind UI brings the shadcn/ui install-and-own philosophy to Astro with 45+ animated, accessible components. ZeroBoot delivers sub-millisecond VM sandboxes for AI agents via copy-on-write forking — the isolation primitive the agentic era was missing. And the Machine Payments Protocol quietly embeds agent-to-agent billing directly into the HTTP call, possibly laying the financial plumbing for the entire AI agent economy.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 10 highlighted links of weeklyfoo #129:

Are AI agents actually slowing us down?

by Gergely Orosz

As more software engineers use AI agents daily, there's also more sloppy software, outages, quality issues, and even a slowdown in shipping velocity. What's happening, and how do we solve it?

🚀 Read it!, ai, engineering

Software Engineering Splits in Three

by Matteo Collina

AI-assisted coding changes the game for enterprises by shifting the bottleneck from coding to judgment, impacting software builds and roles.

📰 Good to know, ai, engineering

Every layer of review makes you 10x slower

by Apen Warr

We’ve all heard of those network effect laws - the value of a network goes up with the square of the number of members.

📰 Good to know, ai, reviews

Why we banned React's useEffect

by Alvin Sng

At Factory, we have a simple, yet important frontend rule - no useEffect.

📰 Good to know, react, use-effect

Comprehension Debt

by Addy Osmany

The hidden cost of AI generated code.

📰 Good to know, ai, engineering

snipgrapher

by Matteo Collina

CLI to generate image snippets from code files, stdin, or inline source. Uses Shiki-based syntax highlighting with a built-in fallback tokenizer.

🧰 Tools, cli, code, images

OpenReview

by openreview.labs.vercel.dev

An open-source, self-hosted AI code review bot powered by Vercel.

🧰 Tools, ai, reviews

Starwind UI

by starwind.dev

shadcn/ui for Astro. 45+ animated and accessible components. Install via CLI. Own the code.

🧰 Tools, ui, astro

ZeroBoot

by zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

🧰 Tools, rust, vms

Machine Payments Protocol

by mpp.dev

The open protocol for machine-to-machine payments. Charge for API requests, tool calls, or content—agents and apps pay per request in the same HTTP call.

🧰 Tools, payments

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #129

Adam — Mon, 23 Mar 2026 05:51:33 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #129 is here: your weekly digest of all webdev news you need to know! This time you'll find 28 valuable links in 4 categories! Enjoy!

🚀 Read it!

Are AI agents actually slowing us down?: As more software engineers use AI agents daily, there's also more sloppy software, outages, quality issues, and even a slowdown in shipping velocity. What's happening, and how do we solve it? by Gergely Orosz / ai, engineering / 12 min read

📰 Good to know

Software Engineering Splits in Three: AI-assisted coding changes the game for enterprises by shifting the bottleneck from coding to judgment, impacting software builds and roles. by Matteo Collina / ai, engineering / 13 min read
The Night Shift Agentic Workflow: Since December, 2025, I've been integrating AI agents into my coding workflow. by Jamon Holmgren / ai, agents / 11 min read
Frontend Memory Leaks: A 500-Repository Static Analysis and Five-Scenario Benchmark Study by Ko-Hsin Liang / frontend, memory / 31 min read
Will Claude Code ruin our team?: The first time I sat down and used Claude Code's Opus 4.5 to build software, I couldn't believe how good it was. by Justin Jackson / ai, engineering / 5 min read
Open SWE: An Open-Source Framework for Internal Coding Agents by blog.langchain.com / ai, framework / 10 min read
Every layer of review makes you 10x slower: We’ve all heard of those network effect laws - the value of a network goes up with the square of the number of members. by Apen Warr / ai, reviews / 15 min read
Measuring Agents in Production: When you are in TPOT echo chamber, you would think fully autonomous AI agents are running the world. by Murat Demirbas / ai, agents / 18 min read
The PERFECT Code Review: How to Reduce Cognitive Load While Improving Quality by Daniil Bastrich / code-review / 13 min read
Why we banned React's useEffect: At Factory, we have a simple, yet important frontend rule - no useEffect. by Alvin Sng / react, use-effect / 1 min read
Comprehension Debt: The hidden cost of AI generated code. by Addy Osmany / ai, engineering / 10 min read

🧰 Tools

Everything Claude Code: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond. by Affaan Mustafa / claude
Slim: Give your localhost a local or public URL by Kamran Ahmed / proxy
TUI Studio: Visual design tool for building Terminal User Interfaces by Javier Alonso Gómez / terminal, ui
GitAgent: A framework-agnostic, git-native standard for defining AI agents by gitagent.sh / ai, agents
snipgrapher: CLI to generate image snippets from code files, stdin, or inline source. Uses Shiki-based syntax highlighting with a built-in fallback tokenizer. by Matteo Collina / cli, code, images
Crust: A TypeScript-first, Bun-native CLI framework with composable modules. by Chenxin Yan / cli, typescript, framework
OpenReview: An open-source, self-hosted AI code review bot powered by Vercel. by openreview.labs.vercel.dev / ai, reviews
Edge.js: Edge.js is a secure JavaScript runtime, designed for Edge computing and AI workloads by edgejs.org / javascript, runtime
gsd: A light-weight and powerful meta-prompting, context engineering and spec-driven development system for Claude Code by TÂCHES / ai
ArtPlayer.js: ArtPlayer.js is a modern and full featured HTML5 video player by Harvey Zhao / player
Starwind UI: shadcn/ui for Astro. 45+ animated and accessible components. Install via CLI. Own the code. by starwind.dev / ui, astro
ZeroBoot: Sub-millisecond VM sandboxes for AI agents via copy-on-write forking by zeroboot / rust, vms
Machine Payments Protocol: The open protocol for machine-to-machine payments. Charge for API requests, tool calls, or content—agents and apps pay per request in the same HTTP call. by mpp.dev / payments
NemoClaw: NVIDIA plugin for secure installation of OpenClaw by NVIDIA / openclaw, nvidia, security
OpenScreen: Create stunning demos for free. Open-source, no subscriptions, no watermarks, and free for commercial use. An alternative to Screen Studio. by Sid / recording
Claude Cookbooks: A collection of notebooks/recipes showcasing some fun and effective ways of using Claude. by Anthropics / claude, ai

🤪 Fun

What's my JND?: You see two colors. by Keith Cirkel / game, colors / 1 min read

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Vite 8 Lands, Agents Learn, GPL Looks Nervous

Adam — Fri, 20 Mar 2026 05:49:35 +0000

TypeScript 6.0 RC landed. Astro 6 arrived with a built-in Fonts API, Content Security Policy, and Live Content Collections. Vite 8 went stable — if your team is still on webpack, you've officially run out of excuses.

On the AI front (buckle up, it's a long list): Matteo Collina got tired of his coding agent repeating the same mistakes and built a self-learning extension to break the cycle. TanStack launched Intent, bundling AI agent skills directly inside npm packages. Bassim Eledath mapped out the 8 Levels of Agentic Engineering — worth knowing which rung you're standing on. If you need a human checkpoint before the agent's code starts flying, Plannotator lets you annotate and review plans visually. For the data-obsessed, Rudel tracks every token your Claude Code sessions burn. And OneCLI is the credential vault the agentic era needed — secure access to any service, no exposed API keys.

Security note: one carefully crafted GitHub issue title was all it took to compromise Cline's CI pipeline and leak npm publish tokens. Every open-source maintainer should read this one.

George Sivulka asked the question nobody wants to answer: AI made developers 10x more productive, so why aren't companies 10x more valuable? Meanwhile, Lorin Hochstein documents the AI reliability debt coming due — the race to capture market share left systems that crumble under real-world load.

And the boldest open-source prediction of 2026: the Linux kernel goes MIT-licensed within 5 years and copyleft dies with it. The GPL momentum data is hard to argue with.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 13 highlighted links of weeklyfoo #128:

The 8 Levels of Agentic Engineering

by Bassim Eledath

AI's coding ability is outpacing our ability to wield it effectively.

🚀 Read it!, ai, engineering

Your Coding Agent Keeps Making the Same Mistakes. I Built a Fix

by Matteo Collina

Explored how coding agents can learn from past mistakes with a new pi-self-learning extension.

📰 Good to know, ai, errors

The Linux Kernel Will Soon Be MIT-Licensed and Copyleft Will Be Dead Within 5 Years

by lowendbox.com

The GNU Public License is popular with many developers, but it’s lost a lot of its momentum over the years.

📰 Good to know, linux, copyleft, mit

Grow fast and overload things

by Lorin Hochstein

The general vibes I see online is that the AI companies have not been doing particularly well in the reliability department.

📰 Good to know, ai, reliability

Introducing TanStack Intent

by TanStack

Ship Agent Skills with your npm Packages

📰 Good to know, ai, docs, agents

Announcing TypeScript 6.0 RC

by Daniel Rosenwasser

Today we are excited to announce the Release Candidate (RC) of TypeScript 6.0!

📰 Good to know, typescript

Astro 6

by Astro Blog

Astro 6 introduces a broad set of new capabilities, including a built-in Fonts API, Content Security Policy API, and support for Live Content Collections that work with your externally-hosted content through the unified Astro content layer.

📰 Good to know, astro

How to steal npm publish tokens by opening GitHub issues

by Neciu Dan

A chain of vulnerabilities and pretty clever attack strategies led to the compromise of the Cline CLI. Let me explain what happened and what you can do to protect yourself.

📰 Good to know, ai, security

Productive Individuals Don't Make Productive Firms

by George Sivulka

AI just made every individual 10x more productive. No company became 10x more valuable as a result. Where did the productivity go?

📰 Good to know, engineering, productivity

Vite 8.0 is out!

by vite.dev

We're thrilled to announce the stable release of Vite 8!

📰 Good to know, vite

Plannotator

by plannotator.ai

Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click.

🧰 Tools, ai, agents, reviews

Rudel

by rudel.ai

Claude Code Session Analytics

🧰 Tools, ai, claude, reports

OneCLI

by onecli.sh

Open-source credential vault, give your AI agents access to services without exposing keys.

🧰 Tools, ai, credentials

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Stay ahead in web development: latest news, tools, and insights #128

Adam — Mon, 16 Mar 2026 05:50:32 +0000

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #128 is here: your weekly digest of all webdev news you need to know! This time you'll find 34 valuable links in 4 categories! Enjoy!

🚀 Read it!

The 8 Levels of Agentic Engineering: AI's coding ability is outpacing our ability to wield it effectively. by Bassim Eledath / ai, engineering / 18 min read

📰 Good to know

Your Coding Agent Keeps Making the Same Mistakes. I Built a Fix: Explored how coding agents can learn from past mistakes with a new pi-self-learning extension. by Matteo Collina / ai, errors / 3 min read
The Linux Kernel Will Soon Be MIT-Licensed and Copyleft Will Be Dead Within 5 Years: The GNU Public License is popular with many developers, but it’s lost a lot of its momentum over the years. by lowendbox.com / linux, copyleft, mit / 13 min read
Filesystems are having a moment: Everyone is talking about files by Daniel Madalitso Phiri / files / 10 min read
Grow fast and overload things: The general vibes I see online is that the AI companies have not been doing particularly well in the reliability department. by Lorin Hochstein / ai, reliability / 4 min read
Introducing TanStack Intent: Ship Agent Skills with your npm Packages by TanStack / ai, docs, agents / 8 min read
Introducing Code Review: A new feature for Claude Code. by Claude / claude, ai / 1 min read
Video Conferencing with Postgres: Yesterday on X, SpacetimeDB tweeted that they had done the world's first video call over a database and, in their own way, invited anyone else to give it a try. by Nick Van Wiggeren / postgres / 8 min read
Announcing TypeScript 6.0 RC: Today we are excited to announce the Release Candidate (RC) of TypeScript 6.0! by Daniel Rosenwasser / typescript / 35 min read
Astro 6: Astro 6 introduces a broad set of new capabilities, including a built-in Fonts API, Content Security Policy API, and support for Live Content Collections that work with your externally-hosted content through the unified Astro content layer. by Astro Blog / astro / 14 min read
Crawl entire websites with a single API call using Browser Rendering: You can now crawl an entire website with a single API call using Browser Rendering's new /crawl endpoint, available in open beta. by Cloudflare / cloudflare, crawl / 3 min read
A Unix Manifesto for the Age of AI: Six Principles by linuxtoaster.com / unix, ai, manifesto / 6 min read
How to steal npm publish tokens by opening GitHub issues: A chain of vulnerabilities and pretty clever attack strategies led to the compromise of the Cline CLI. Let me explain what happened and what you can do to protect yourself. by Neciu Dan / ai, security / 11 min read
Using CSS animations as state machines to remember focus and hover states with CSS only: Recently, I was searching for a way to style an element depending on whether it was ever focused. by Patrick Brosset / css / 5 min read
The Value of z-index: The z-index property is one of the most important tools any UI developer has at their disposal, as it allows you to control the stacking order of elements on a webpage. by Amit Sheen / css / 12 min read
WordPress Everywhere: As we announced and TechCrunch covered, my.wordpress.net has soft-launched. by Matt Mullenweg / wordpress / 7 min read
Productive Individuals Don't Make Productive Firms: AI just made every individual 10x more productive. No company became 10x more valuable as a result. Where did the productivity go? by George Sivulka / engineering, productivity / 1 min read
WTF does a product manager do? (and why engineers should care): Skills for developers from the product manager playbook by Jina Yoon / productmanagement / 11 min read
Vite 8.0 is out!: We're thrilled to announce the stable release of Vite 8! by vite.dev / vite / 11 min read
RedwoodSDK 1.0: Getting Out of the Weeds by Peter Pistorius / redwood, cloudflare / 6 min read

🧰 Tools

page-agent.js: JavaScript in-page GUI agent. Control web interfaces with natural language. by alibaba / ai, web
UX Components: Search components by Patrick Neeman / ui
Revo Grid: Powerful virtual data table smartsheet with advanced customization. Best features from excel plus incredible performance by rv-grid.com / grid
Free Online SVG Converter: A simple workflow to turn images into scalable vector graphics. by Kristjan Retter, Hendrik Parik / svg
Photo Palettes: Generate beautiful color palettes from your photos. by photopalettes.com / colors
Ki Editor: Multi-cursor combinatoric modal editor. by ki-editor.org / editor
Plannotator: Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click. by plannotator.ai / ai, agents, reviews
emittery: Simple and modern async event emitter by Sindre Sorhus / async, events
Verdaccio: A lightweight Node.js private proxy registry by verdaccio.org / registry
Rudel: Claude Code Session Analytics by rudel.ai / ai, claude, reports
OneCLI: Open-source credential vault, give your AI agents access to services without exposing keys. by onecli.sh / ai, credentials
theSVG: 4,000+ brand SVG icons for developers. Tree-shakeable, typed, open source. npm i thesvg by thesvg.org / svg, icons
TerminalUse: The easiest way to deploy Claude Agent SDK and Codex agents. by terminaluse.com / ai, tgerminal

📚 Tutorials

2026 F1 Drivers Custom Select using appearance: Super nice select style by Chris Bolson / css / 1 min read

Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.