TLDR WEB DEV 2025-09-04

PROMISES FROM THE GROUND UP

Promises in JavaScript aren't always intuitive to use, but they're required to be productive with JavaScript. Promises are needed because JavaScript is single-threaded, which can cause issues when blocking operations like window.prompt() are used. This post dives into the mechanics of Promises, their states (pending, fulfilled, and rejected), and how to work with them using the .then() and .catch() methods. It also covers creating custom Promises, chaining them together, passing data between them, and the modern async/await syntax for a more synchronous-like experience.

HOW RUBYGEMS.ORG PROTECTS OUR COMMUNITY'S CRITICAL OSS INFRASTRUCTURE

RubyGems.org uses a multi-layered security approach including automated detection, risk scoring, and retroactive scanning to proactively identify malicious gems, successfully detecting 70-80% of threats before they're publicly reported. In a recent incident involving credential-stealing gems discovered by Socket.dev, the RubyGems security team had already flagged and removed nearly all malicious packages within days of detection in July.

SAY BYE WITH JAVASCRIPT BEACON

The JavaScript Beacon API provides a reliable way to send data to servers when users leave a website. This is unlike traditional methods like XMLHttpRequest or fetch in “beforeunload” events, which often fail because browsers don't wait for JavaScript execution when navigating away. The Beacon API works as a "fire-and-forget" mechanism with a simple syntax (`navigator.sendBeacon()`), allowing the browser to send the request immediately without waiting for a response, though it's limited to small amounts of data and only supports POST requests.

HOW TO GIVE A GOOD TALK

Good talks should inform the audience about the work's value, educate them with portable insights, and entertain them to hold their attention. It's important to understand the audience's shared values and frame the work in terms of efficiency and correctness.

THE BITTER LESSON IS MISUNDERSTOOD

The Bitter Lesson has been misinterpreted as prioritizing computation above all else. Scaling laws show that data is equally, if not more, crucial, as compute power is wasted without sufficient data. AI progress now depends on either finding ways to wring more value from existing data through improved model architectures or creating entirely new data through innovative "alchemical" methods like self-play.

HOW MUCH SHOULD YOU SPEND ON ACCESSIBILITY?

Digital accessibility should be treated as a core compliance investment. Companies generally spend 3-10% of annual revenue on compliance overall, making accessibility investments range from 0.1-0.5% of total revenue for most organizations. The cost of non-compliance is nearly three times higher than compliance costs, making proactive accessibility investment both a legal necessity and a good opportunity to reach over 1 billion people with disabilities worldwide.

Download the report ⬇️

CLAUDE CODE: NOW IN BETA IN ZED

Zed has released a beta version of Claude Code integrated directly into the Zed editor via the new Agent Client Protocol (ACP). This allows developers to use Claude Code's features like real-time code editing and custom workflows within the Zed environment. ACP is an open standard designed to allow any AI agent to connect with Zed and other compatible editors.

AGENTSCOPE

AgentScope is a framework for building LLM apps with a focus on agent-oriented programming. It prioritizes transparency, real-time steering, agentic features like tool management and long-term memory, and model agnostic design. The framework offers modules for models, tools, MCP (Model Context Protocol), agents, tracing, memory, evaluation, and formatting, all highly customizable and modular.

REGEXP EQUIVALENCE CHECKER

This tool checks the equivalence of two JavaScript regular expressions (excluding global, local, unicode, backreferences, lookbehind, and word boundary syntax), showing if they match the exact same strings or providing example strings that demonstrate their differences.

AUTOLINKING'S BROKEN PROMISE

Dependency management is complex in Expo and React Native apps, partly due to the "broken promise" of autolinking to simplify native module dependencies. Expo SDK 54 has several fixes, including direct Metro dependencies, removing implicit dependencies, consistent autolinking, and a CLI fallback resolver, to address these challenges and support various package managers and monorepos. The updated autolinking system now discovers transitive dependencies, allowing `expo-doctor` to proactively report duplicate modules and potential conflicts for developers to resolve.

MIT STUDY FINDS ARTIFICIAL INTELLIGENCE USE REPROGRAMS THE BRAIN, LEADING TO COGNITIVE DECLINE

A recent MIT study investigated the cognitive effects of using ChatGPT for essay writing. The study found that students who relied on ChatGPT experienced weakened brain connectivity, impaired memory recall, and a diminished sense of authorship. EEG scans revealed decreased neural activity, especially in areas related to attention and visual processing.

FOR ALL THAT'S HOLY, CAN YOU JUST LEVERAGE THE WEB, PLEASE?

This dev went through a convoluted and frustrating offline customer service process for registering a washing machine warranty, contrasting it with the efficient and modern online option of uploading a photo for AI-powered product number extraction.

101 REAL-WORLD GEN AI USE CASES WITH TECHNICAL BLUEPRINTS

Google Cloud shows 101 architectural blueprints with corresponding tech stacks to help developers and business leaders implement generative AI across 10 major industries.

TUFTE CSS

Tufte CSS provides a CSS framework to style web articles with a focus on simplicity, sidenotes, tight integration of graphics, and careful typography.

USING CLAUDE CODE FROM ANYWHERE

Web-based workflows exist that solve the limitations of current methods for using Claude Code by providing on-demand, ephemeral sandboxes, live interactive sessions, and automated chat management with persistence.