TLDR Index
TLDR Dev

TLDR DEV 2025-12-23

6 sections19 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

GOODBYE, LOW TEST COVERAGE AND SLOW QA CYCLES

Bugs sneak out when less than 80% of user flows are tested before shipping. However, getting that kind of coverage (and staying there) is hard and pricey for any team.

qawolf.comSponsor

02ARTICLES & TUTORIALS

LOGGING SUCKS

Traditional logging is inadequate for modern, distributed systems, usually providing little useful context for debugging issues. A shift to "wide events" or canonical log lines, which are single, comprehensive log entries emitted per request per service, may solve this problem. These events are rich in high-cardinality and high-dimensionality data, allowing for powerful queries and analytics instead of string searches.

loggingsucks.com18 min read

SCALING LLMS TO LARGER CODEBASES

Scaling LLMs within large codebases requires investments in both guidance and oversight. Guidance focuses on providing LLMs with high-quality context, such as prompt libraries and well-structured, modular codebases, to allow for efficient "one-shot" code generation without needing a lot of rework. Oversight refers to human engineers who validate LLM choices, making sure of architectural integrity and aligned solutions.

blog.kierangill.xyz12 min read

03OPINIONS & ADVICE

EVERYONE IS A STAFF ENGINEER NOW

AI coding agents have become so good that they have fundamentally transformed software engineering, making code implementation inexpensive. This means engineers are increasingly expected to focus on higher-level skills like architectural judgment, system-level thinking, and managing complex contexts across multiple domains. Devs will need to start adapting their workflows, including planning and steering AI agents and developing habits to maintain focus amidst asynchronous work.

read.engineerscodex.com8 min read

A YEAR OF VIBES

In 2025, this dev left Sentry, launched a new company, and shifted his programming approach to embrace hands-off agentic coding with tools like Claude Code. He became deeply integrated with AI agents for tasks from code generation to daily organization. However, he's sometimes worried about emergent human-like tendencies of LLMs, questioning terms like "agent.”

lucumr.pocoo.org12 min read

04LAUNCHES & TOOLS

Sponsored

WHAT IF YOU WENT ALL IN ON AI FOR 1,000 HOURS?

You're already using AI. Agents, RAG, fine-tuning are part of your workflow. Now, it's time to take the next step: Gauntlet [14] brings cracked engineers into a 10-week, 1,000-hour fellowship. Fully funded by companies hiring from the cohort. Graduates don't job hunt: they leave with $200K+ offers. Apply to Cohort 4 [14].

qualify.gauntletai.comSponsor

TAMBO

Tambo AI is a Generative UI SDK for React. It allows AI to dynamically render components based on natural language conversations. Components are defined with Zod schemas, which the AI then uses to generate one-time elements or manage persistent, interactable UI.

github.comGitHub repository

COCOINDEX

CocoIndex is a fast data transformation framework for AI. It uses a dataflow programming model, with plug-and-play building blocks and guaranteed data freshness through incremental processing and data lineage.

github.comGitHub repository

SNITCH

snitch is a prettier way to inspect network connections. It enables users to inspect network connections with a clean tui or styled tables. Examples are available in the repository.

github.comGitHub repository

05MISCELLANEOUS

YOUR SUPABASE IS PUBLIC

This dev frequently finds Supabase projects with exposed credentials, which, due to a lack of proper Row Level Security (RLS), grant full access to sensitive user data within the database. This vulnerability is surprisingly common. It allows simple `curl` requests to retrieve all user information from unprotected tables. While users are responsible for RLS, Supabase's design could be improved with clearer warnings or default secure configurations to prevent the anon key from becoming a master key.

skilldeliver.com3 min read