TLDR Index
TLDR Web Dev

TLDR WEB DEV 2023-12-22

5 sections18 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01ARTICLES & TUTORIALS

A CRASH COURSE ON CACHING FUNDAMENTALS

The primary reason for caching is to improve performance. Other benefits include faster loading times (users get their pages faster), improved efficiency, and reduced loads on the server. This article dives into different types of caching, such as page, content, data, instruction, browser, and query caching. It also describes the trade-offs of caching, such as how caching reduces latency but also reduces data consistency, which can make certain applications unusable.

swequiz.com5 min read

GETTING STARTED WITH WEB PERFORMANCE

A look at how to improve your website’s performance with strategies, tools, and tips to help you make notable improvements. It’s a guide for everyone with topics for beginners, like why web performance is important and the core web vitals, advanced tips on performance techniques, and tools on testing that can help find performance gaps in websites.

htmhell.dev18 min read

DIVING INTO SERVER ACTIONS IN NEXT.JS 14

Next.js 14 introduced Server Actions, functions that execute on the server side. Server Actions allow developers to offload responsibilities like data fetching and mutations to the server, avoiding security concerns related to client-side data manipulation. This article provides a practical example of how to use Server Actions to handle form submissions and interact with a database, demonstrating the benefits of this approach.

blog.logrocket.com10 min read

02OPINIONS & ADVICE

I LOVE RUBY

Ruby has been a constant in the author’s extensive career as a software developer. Although Ruby has lost popularity in recent years, she still vouches for the language’s usefulness and amazing developer experience. In this article, she explains why she loves Ruby, including points that highlight its expressiveness, ease of use, and supportive community.

eliseshaffer.com4 min read

WHAT WE NEED INSTEAD OF “WEB COMPONENTS”

Web Components have various problems, such as their lack of semantic value for search engines, suboptimal performance, and clunky APIs like customElements.define and Shadow DOM. Browser makers should focus on solving real problems faced by developers, such as improving reactivity, optimizing DOM rendering, and addressing the need for self-sizing iframes.

blog.carlana.net10 min read

03LAUNCHES & TOOLS

SVELTEKIT 2.0

SvelteKit is the official framework for creating apps with Svelte. This version release includes many highly anticipated changes. Version 2.0 adds support for Vite 5 along with many other small improvements. SvelteKit 2.0 smooths the way for Svelte 5's release in 2024.

svelte.dev2 min read

CASIBASE

Casibase is an open-source domain knowledge database powered by ChatGPT, Casbin, and Casdoor. It has a separate architecture for the frontend (React) and backend (Golang). Casibase supports high concurrency, integration with existing systems, and mainstream databases like MySQL and PostgreSQL. It has a web UI for managing the database.

github.comGitHub repository

PENX

PenX is an open-source note-taking app designed for structure and ease of use. It prioritizes local-first data and user privacy with end-to-end encryption and comes with GitHub-based version control out-of-box.

github.comGitHub repository

04MISCELLANEOUS

THE YEAR IN COMPUTER SCIENCE

Computer scientists made significant progress in various areas of the field this year. AI demonstrated remarkable advancements in generating text and art, with large language models like ChatGPT gaining attention. Computer scientists also made improvements to Shor's algorithm for factoring large numbers, delved into the behaviors emerging from large language models, and explored a vector-driven approach to AI. Scientists researched questions related to computational complexity, error correction in quantum computing, and the intersection of cryptography and AI, revealing backdoors in machine learning models.

quantamagazine.org7 min read

GOOGLE OAUTH IS BROKEN (SORT OF)

A Google OAuth vulnerability allows former employees of organizations to retain indefinite access to applications like Slack and Zoom even after they have been off-boarded and removed from the company's Google organization. The vulnerability arises from the ability to create non-Gmail Google accounts using corporate Google organization email aliases and email plus sign forwarding.

trufflesecurity.com5 min read

THE COMPANIES THAT SHAPED POSTHOG

There are various ways enduring companies become successful. For example, GitHub’s success was based on giving away its core product for free, which created easy developer adoption and made it easy for enterprises to pay for it. HubSpot had product diversification and great inbound marketing. Zapier is an expert in programmatic SEO and is a self-serve application. The article also mentions lessons from GitLab, Atlassian, and Y Combinator.

open.substack.com7 min read