How Meilisearch drastically sped up the indexation of embeddings in its vector store by introducing a new LMDB API. This new API allows Meilisearch to scale linearly with the number of available indexing CPUs, removing the need to fully scan the database…

Most SQL tools treat SQLite as a “flavor” of a generic SQL parser. They approximate the language, which means they break on SQLite-exclusive features like virtual tables, miss syntax like UPSERT, and ignore the 22 compile-time flags that change the syntax…

How we are periodically dumping metrics about our most demanding BEAM processes into an easy-to-query ClickHouse table.

Comprehension debt is the hidden cost to human intelligence and memory resulting from excessive reliance on AI and automation. For engineers, it applies most...

On March 19, 2026, trivy — a widely used open source vulnerability scanner maintained by Aqua Security — experienced a second security incident. Three weeks after the hackerbot-claw incident on February 28 that resulted in a repository takeover, a new compromised…

A Coherent Vision for the Future of Version Control

How should errors propagate in concurrent programs? We start from that question, work step by step, and end up reinventing structured concurrency. Some reflections on why this matters as much during development as in production.

Recently I was surprised to discover that there are several bad ways to do magic links.
The basic idea is: a user hits “login”, enters their email address, and receives an email that allows them to login without a password. What could possibly go wrong?
I…

SQLite VFS with sub-100ms cold JOIN queries from S3 + page-level compression and encryption - russellromney/turbolite

Notes by `dpc`

A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.

We replaced expensive sandboxes with ChromaFs, a virtual filesystem over Chroma, to give our docs AI assistant the ability to explore documentation like a developer would.

Claude Code has gotten extremely good at finding security vulnerabilities, and this is only the beginning.

For eight years, I’ve wanted a high-quality set of devtools for working with SQLite. Given how important SQLite is to the industry1, I’ve long been puzzled that no one has invested in building a …