codespelunker - CLI code search tool that understands code structure and ranks results by relevance. No indexing required with CLI, TUI, MCP and HTTP support. - boyter/cs

PostgreSQL connection pooler, load balancer and database sharder. - pgdogdev/pgdog

Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first…

Get an inside look at shrinking large Go binaries in the Datadog Agent through dependency and linker analysis.

Most people know BuildKit as the thing that makes docker build fast. But BuildKit is a general-purpose build framework with a programmable architecture that can produce any artifact, not just container images. Here's how it works and how I used it to build…

The Web streams API has become ubiquitous in JavaScript runtimes but was designed for a different era. Here's what a modern streaming API could (should?) look like.

Your .env files are a liability. Two simple patterns for injecting secrets from 1Password or macOS Keychain so credentials never touch disk as plaintext.

A free, open IP Geolocation database in MMDB format. Includes ASN, country, and continent data. Updated daily. Licensed under CC BY 4.0.

Leonardo de Moura — Creator of Lean and Z3

Web Extension for saving a faithful copy of a complete web page in a single HTML file - gildas-lormeau/SingleFile

A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.

Determinate Nix now supports Wasm functions in Nix expressions, bringing a range of new possibilities to the Nix ecosystem

We built the same AI chat application as an SPA (Next.js) and as a hypermedia app (PHP/Datastar), then benchmarked both under real-world conditions (Slow 4G, mobile device, 4× CPU throttling). The results are challenging common assumptions about modern web…

In this post, we highlight the most common 13 mistakes we see our new users encounter, why they occur and the correct approach.

One of the simplest tests you can run on a database:

A lightweight blogging engine based on text files, with native Fediverse and IndieWeb support

JavaScript's Date object has been a source of bugs for three decades. Temporal, which just reached Stage 4, is a modern replacement with immutable types, first-class time zone and calendar support, and nanosecond precision. This is the story of how Bloomberg…

80 comments

A systematic audit of Algolia DocSearch found 39 admin API keys exposed across projects like Home Assistant, KEDA, and vcluster.

Create, manage, and query serverless PostgreSQL databases from your terminal. Branching, migrations, observability, type generation — all built in.