Clear briefings on dev tools, AI, and the tech that ships.
Category
Hands-on coverage of developer tooling, CLIs, package and supply-chain security, build and release workflows, and the changes that affect how software ships.
VS Code 1.124 turned Copilot Autopilot on by default - the agent edits files and runs commands without asking. What changed, and how to rein it in.
One hijacked npm account backdoored 140+ Mastra packages in ~88 minutes - faster than a takedown reaches you. The fix is on your side of the install.
A chained LiteLLM flaw let a low-privilege user reach admin and run code on the gateway. The real exposure is what an AI proxy concentrates in one place.
Bumblebee is a free, read-only scanner that checks your machine — npm, PyPI, MCP configs, extensions — for known-bad packages, without executing anything. Here's how to run it.
iOS 27 disables the UIDesignRequiresCompatibility opt-out: build against Xcode 27 and your app adopts Liquid Glass. What to do, and by when.
Node.js 26 enables the Temporal date/time API by default. What actually changes, what doesn't, and why you shouldn't rip out date-fns yet.
OpenCode is an open-source, model-agnostic terminal coding agent. What it is, how to install it on macOS/Linux/Windows, and how to set up your first provider.
WebMCP would let your site give AI agents labeled tools instead of being scraped. What Chrome's proposal is, how it differs from MCP, and whether to adopt it.
A self-spreading npm worm called Miasma reached 73 Microsoft GitHub repos on June 5. What Phantom Gyp is, how it uses AI coding agents, and what changed.
Cloudflare acquired VoidZero, the team behind Vite, Vitest, and Rolldown. What stays MIT open source, what's new, and what it means if you build with Vite.
On June 1, 2026, every GitHub Copilot plan moved to metered AI Credits. The backlash is about cost, but the change that matters is predictability. Here's why.
Microsoft's Coreutils for Windows brings native Linux commands like ls, grep, and cp without WSL. How to install it and the PowerShell alias catch.
Install Claude Code, Codex CLI, and Google Antigravity in the terminal, compare the three AI coding agents, and fix command not found and sign-in errors.
Cloudflare Flagship is now in public beta. Here is what edge feature flags change for Workers teams, percentage rollouts, kill switches, and release control.
GitHub Actions and Pages had another May 2026 disruption. Here is how teams should triage CI outages, retries, deployments, and runner plans.
Nx Console shows why VS Code extension updates, GitHub CLI tokens, and release age checks need a tighter developer workflow.
GitHub's repo breach tied to a poisoned VS Code extension shows why developer tools, auto-updates, and tokens need tighter review.