TLDR Index
TLDR Web Dev

TLDR WEB DEV 2025-07-03

5 sections14 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01ARTICLES & TUTORIALS

HOW I SCANNED ALL OF GITHUB'S “OOPS COMMITS” FOR LEAKED SECRETS

A white-hat hacker found leaked secrets in deleted GitHub commits by scanning force push events using the GitHub Event API and GH Archive. He developed a tool to identify these "Oops Commits" and discovered thousands of active secrets, including one that could have led to a massive supply-chain compromise in the Istio project. The process involved manual searching, a vibe-coded triage tool, and an eventual AI-driven approach to identify valuable secrets.

trufflesecurity.com16 min read

REMIXING SHOPIFY'S ADMIN: HOW WE MADE IT 30% FASTER AND AI-READY

Shopify rebuilt its Admin platform using Remix, which led to a 30% performance improvement thanks to using Remix loaders for parallel fetching and having intelligent prefetching. This rebuild also made the system AI-ready by giving it structured route information and form schemas after the rebuild. The system itself handles 67 million daily page views and contributions from 101 teams with 350+ daily code merges.

shopify.engineering8 min read

02OPINIONS & ADVICE

STOP BUILDING AI AGENTS

Devs often jump to building complex AI agents powered by LLMs when simpler workflows would be better and easier to debug. There are multiple LLM workflow patterns, like prompt chaining and routing, that can solve many problems without the complexity of full-blown agents. Agents, where the LLM controls the workflow, should only be implemented for dynamic tasks requiring human oversight.

decodingml.substack.com13 min read

WHY I'M DIALING BACK MY LLM USAGE

When rebuilding infrastructure with Go and ClickHouse, this dev found that LLMs produced buggy and messy code, leading to a cycle of fixing one error only to create new ones. This experience showed a gap between the hype surrounding AI productivity and the reality of its limitations in production environments. Instead, LLMs are best for small tasks like refactoring.

zed.dev4 min read

HOW TO WRITE COMPELLING SOFTWARE RELEASE ANNOUNCEMENTS

Release announcements should focus on how the user's experience is improved, not just listing features or bug fixes. Instead of focusing on what developers did, highlight what users can now do with the software, using clear language and visuals like graphs and concise demos.

refactoringenglish.com11 min read

03LAUNCHES & TOOLS

GLASS3D GENERATOR

The Glass3D generator allows devs to create a 3D glass effect (like Apple Liquid Glass) and customize visual effects like blur, color, and texture, with CSS code provided.

glass3d.devTool

INTRODUCING THE FIRST ALPHA OF TURSO: THE NEXT EVOLUTION OF SQLITE

Turso has released the first alpha of its SQLite rewrite, which addresses SQLite's limitations like its lack of concurrent writes, limited real-time capabilities, and a closed development community. The alpha has an asynchronous interface to replace SQLite's synchronous API and includes core database operations, though indexes, multi-threading, and other advanced features are still in development.

turso.tech7 min read

WHATSAPP-API-JS V6

whatsapp-api-js is a TypeScript framework for server-agnostic integration with the official WhatsApp Business API, with features like message handling and webhook setup.

github.comGitHub repository

04MISCELLANEOUS

HOW LARGE ARE LARGE LANGUAGE MODELS?

This article goes over how LLMs' sizes have changed over time, starting with GPT-2 and GPT-3's parameter counts and training data specifics and ending with the limited public information about GPT-3.5 and GPT-4. Models like Mixtral and Deepseek V3 use a Mixture-of-Experts architecture, which makes them harder to compare to the traditional "dense" architectures.

gist.github.com8 min read

THAT XOR TRICK

The XOR (exclusive or) bitwise operation has its applications in solving interview questions. The "XOR trick" is where duplicated values in a sequence of XOR operations cancel each other out. This trick can be applied to solve problems like in-place swapping of variables, finding a missing number in an array, finding a duplicate number, and even finding two missing/duplicate numbers.

florian.github.io14 min read

LLMS AS COMPILERS

LLMs can function as compilers in the future, transforming context into software features. Instead of directly manipulating code, engineers will focus on providing context, defining tests, and iterating based on the results.

resync-games.com3 min read