Rafael Garcia nails the new reality: writing code with AI is trivially fast, but reviewing those AI-generated PRs? That's your bottleneck now. Martin Alderson argues agentic coding just dropped software costs 90%—and the economics have fundamentally shifted. Meanwhile, Jeremy Pinto introduces the provocative 0.1x engineer (yes, slowing down might actually be speeding up), and Alex Kladov's mechanical habits prove that engineering excellence comes from automated processes, not heroic efforts.
Security stays front and center: pnpm dodged Shai-Hulud 2.0 (essential lessons for your supply chain!), and npm classic tokens are officially gone—session-based auth is the new normal, so update those workflows! Microsoft ships a JS/TS Modernizer for VS Code that automates framework upgrades and package updates, because keeping projects modern shouldn't be manual labor.
On the tools front: Cloudflare's Vibe SDK lets you build your own vibe-coding platform (open source, powerful stack), Indie UI drops a free shadcn form builder that indie devs will love, and mgrep brings AI-powered semantic search to everything—code, images, PDFs, you name it. Simon Willison champions single-file HTML tools combining HTML+JS+CSS for lightweight magic, proving sometimes simple is perfect.
Addy Osmani closes with the AI development paradox: we're coding faster but shipping slower. Figure that one out!
Enjoy!
Signup here for the newsletter to get the weekly digest right into your inbox.
Find the 12 highlighted links of weeklyfoo #115:
How I keep up with AI-generated PRs
by Rafael Garcia
AI coding assistants have shifted the bottleneck in software development. Writing code is now trivially fast. Reviewing it is not.
🚀 Read it!, ai, reviews, engineering
Has the cost of building software just dropped 90%?
by Martin Alderson
The economics have changed dramatically now with agentic coding, and it is going to totally transform the software development industry (and the wider economy).
📰 Good to know, ai, engineering
How We're Protecting Our Newsroom from npm Supply Chain Attacks
by Ryan Sobol
We got lucky with Shai-Hulud 2.0.
📰 Good to know, pnpm, security
by Jeremy Pinto
10x vs 0.1x
📰 Good to know, engineering, ai
by Alex Kladov
My schtick as a software engineer is establishing automated processes
📰 Good to know, engineering, automation
Useful patterns for building HTML tools
by Simon Willison
I’ve started using the term HTML tools to refer to HTML applications that I’ve been building which combine HTML, JavaScript, and CSS in a single file and use them to provide useful functionality.
📰 Good to know, html, tools
npm classic tokens revoked, session-based auth and CLI token management now available
by github.blog
As previously announced, we’re completing the npm classic token deprecation today.
📰 Good to know, npm
Announcing the JavaScript/TypeScript Modernizer for VS Code
by Sayed Ibrahim Hashimi
Keeping JavaScript/TypeScript projects up-to-date can be a challenge, especially when it’s time to upgrade a bunch of npm packages or adopt the latest frameworks.
📰 Good to know, javascript, typescript, modernization
by cloudflare.com
An open-source vibe coding platform that helps you build your own vibe-coding platform, built entirely on Cloudflare stack
🧰 Tools, cloudflare, ai
by Ali Hussein
Collection of UI components and free shadcn form builder
🧰 Tools, design, ui
by mixedbread.ai
A calm, CLI-native way to semantically grep everything, like code, images, pdfs and more.
🧰 Tools, search, grep
AI paradox: faster coding, slower shipping
by Addy Osmani
Why are we coding faster, but shipping slower? Here is a “practical playbook” for AI-assisted software engineering in 2025.
📺 Videos, ai
Want to read more? Check out the full article here.
To sign up for the weekly newsletter, visit weeklyfoo.com.
Top comments (0)