DEV Community

Cover image for Builders, Coasters, and 30 Plugins Gone Rogue
Adam
Adam

Posted on

Builders, Coasters, and 30 Plugins Gone Rogue

Gergely Orosz surveyed 900+ software engineers and found three archetypes emerging in the AI era: builders, shippers, and coasters. The breakdown of who's thriving, who's just shipping faster, and who's quietly coasting is the most grounded portrait of the profession right now.

The bigger question is what comes next. James Stanier maps three scenarios for whether the traditional mentorship pipeline can survive an AI-compressed learning curve — and the answer matters for everyone at every level of seniority. Addy Osmani formalizes the new skill that will separate high-functioning AI teams from the rest: Agentic Engine Optimization — structuring your docs for agent discoverability, parsability, and token efficiency. Tim Davis names the fundamental shift: we're no longer building deterministic systems — we're assembling probabilistic ones, from code no single human designed end-to-end, reviewed under time pressure. The accountability questions that creates haven't been answered yet.

Orhun Parmaksiz makes the principled case against vibe-coding: letting AI handle the tedious parts while you keep only the interesting ones isn't a productivity hack — it's how craft and maintainability erode together. The practical complement: TkDodo's vertical codebase — stop organizing your codebase by technical type and start organizing by domain, so everything that belongs together actually lives together.

Christian Ekrem demonstrates how branded types and discriminated unions let TypeScript carry proof that validation already happened — no defensive if-checks scattered across files, zero runtime overhead.

Security brought two head-turners this week: someone purchased 30 WordPress plugins specifically to plant backdoors across the portfolio (the acquisition vector most threat models never account for), and Cal.com closed its main repository after five years of open source because AI can now find and exploit public vulnerabilities faster than maintainers can patch them. The security calculus for open-source projects has quietly shifted.

Jonathan Chart's index deep dive covers composite index order, partial indexes, functional indexes, and EXPLAIN — the fundamentals that turn mysterious slow queries into five-minute fixes.

Finally: GitHub Stacked PRs just went native with one-click merging and AI agent integration — the pattern that was too painful to adopt at scale has officially graduated to mainstream. And Google's Magika is now open source: AI-powered file type detection for 200+ content types, the same model powering Google's own user safety infrastructure.

Enjoy!

Signup here for the newsletter to get the weekly digest right into your inbox.

Find the 12 highlighted links of weeklyfoo #133:


The Impact of AI on Software Engineers in 2026

by Gergely Orosz

Survey of 900+ engineers reveals three archetypes - builders, shippers, coasters - and how AI tools affect each differently in cost, productivity, and professional identity

🚀 Read it!, ai, engineering


Agentic Engine Optimization (AEO)

by Addy Osmani

How to structure docs so AI coding agents can actually use them - discoverability, parsability, token efficiency, and access control

📰 Good to know, ai, engineering


Who Will Be the Senior Engineers of 2035?

by James Stanier

Three scenarios for how AI will reshape the way senior engineers emerge - and whether the traditional mentorship pipeline can survive

📰 Good to know, engineering, ai


Write Less Code, Be More Responsible

by Orhun Parmaksiz

Against the vibe-coding trend - why letting AI handle the tedious parts while you keep the fun ones is a recipe for quality and maintainability decline

📰 Good to know, ai, engineering


Parse, Don't Validate in TypeScript

by Christian Ekrem

Branded types and discriminated unions let TypeScript carry proof that validation already happened - no more defensive if checks scattered across files

📰 Good to know, typescript, javascript


30 WordPress Plugins Backdoored After Acquisition

by anchor.host

A buyer purchased 30 plugins of varying popularity and planted a backdoor in all of them - a supply chain attack via legitimate ownership

📰 Good to know, security


Things You Didn't Know About Indexes

by Jonathan Chart

Composite index order, partial indexes, functional indexes, and EXPLAIN - a practical deep dive on where indexes help and where they hurt

📰 Good to know, database, engineering


Cal.com Goes Closed Source After 5 Years

by Cal.com

AI can now rapidly find and exploit open-source vulnerabilities - Cal.com closes its main repo while releasing Cal.diy under MIT for hobbyists

📰 Good to know, open-source, engineering


The Vertical Codebase

by TkDodo

Stop splitting code by technical type (components, hooks, utils) - group by functionality instead so everything in a domain lives together regardless of type

📰 Good to know, engineering


Probabilistic Engineering and the 24-7 Employee

by Tim Davis

The shift from deterministic to probabilistic engineering - code generated by stochastic systems, reviewed under time pressure, assembled into wholes no single human ever designed end-to-end

📰 Good to know, engineering, ai


GitHub Stacked PRs

by GitHub

Native stacked PR workflow - break large changes into small reviewable pull requests and merge the whole stack in one click, with AI agent integration

🧰 Tools, git, github, tools


Magika

by Google

Google's AI-powered file type detection that identifies 200+ content types using a lightweight deep learning model - used internally for user safety

🧰 Tools, ai, tools, github


Want to read more? Check out the full article here.

To sign up for the weekly newsletter, visit weeklyfoo.com.

Top comments (0)