Search the archive

Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.

Results

4,452 matches

IT'S UNCOMFORTABLE TO SIT WITH “I DON'T KNOW”

Human discomfort with admitting "I don't know" drives us to readily accept convenient, but not always true, certainty, especially from sources like AI, even when logic suggests these sources are unreliable on unfamiliar topics.

2025.12.16
blog.jim-nielsen.com3 min readTLDR Dev

MAKING COMPLEX WEB APPS FASTER

Microsoft is proposing a new Delayed Message Timing API to help web developers diagnose and fix performance issues in complex web applications that use multiple windows, iframes, or worker threads. The API addresses three main causes of messaging delays: busy receiving contexts, congested task queues, and serialization/deserialization overhead by providing detailed timing metrics and diagnostic information.

2025.12.15
blogs.windows.com6 min readTLDR Dev

ASK HN: HOW CAN I GET BETTER AT USING AI FOR PROGRAMMING? (HACKER NEWS THREAD)

A dev is struggling to effectively use AI, specifically Claude Code, to rewrite an old jQuery and Django project into SvelteKit. Experienced users recommend using a CLAUDE.md file correctly for persistent instructions, using Claude's "plan mode" for task breakdown before implementation, and adding feedback loops through tests to verify the AI's work. Also, Opus 4.5 should be used over any other model for coding when possible.

2025.12.15
news.ycombinator.comTLDR Dev

JUSTIFIED

just can normalize most projects in a convenient, fast, readable, and portable way. Large language models are good at generating justfiles, and justfiles help models know what actions they can run on a project. This post goes through some tricks you can do with just.

2025.12.15
bitecode.dev12 min readTLDR Dev

JSDOC *IS* TYPESCRIPT

Svelte's move to JSDoc for type declarations was not a rejection of TypeScript. Rather, JSDoc should be understood as an inherent part of TypeScript itself. This is because the TypeScript language service powers the static analysis and IntelliSense for both `.ts` files and JSDoc comments, making them two sides of the same coin.

2025.12.15
culi.bearblog.dev4 min readTLDR Dev

Sponsored

GETTING PRACTICAL ABOUT SERVICE MANAGEMENT TRANSFORMATION

Legacy ITSM tools love rigid processes. Atlassian puts teams first - no matter what their processes look like. This free guide [10] covers how to run change, incident, and request management in a way that actually works for modern Dev and Ops workflows. Get the whitepaper

2025.12.15
atlassian.comSponsorTLDR Dev

SHADCN/CREATE

shadcn/create lets developers build their own shadcn/ui. Everything is customizable - developers can change components, icons, colors, themes, and fonts to build something unique. shadcn/create is available for Next.js, Vite, TanStack Start, and v0. A video introducing the framework is available in the thread.

2025.12.15
threadreaderapp.com2 min readTLDR Dev

CAPSUDO

capsudo is an object-capability style sudo. It creates a socket that acts as an object capability, allowing anyone who can access the socket to make use of it. The capsudo daemon accepts connections, stitching everything together to run programs bound to object capabilities. Examples of how to use the tool are available in the repository.

2025.12.15
github.comGitHub repositoryTLDR Dev

THE UNOFFICIAL 37SIGNALS/DHH RAILS STYLE GUIDE

This GitHub gist contains a Claude Code-generated style guide based on a deep analysis of 37signal's open source project management tool, Fizzy. Claude Code was used to analyze the entire code base to extract the patterns used and infer the philosophy of implementation choices. The guide contains patterns extracted from actual code, guidance based on observed conventions, notes on what's deliberately absent, and reusable code that can be copied into personal projects.

2025.12.15
gist.github.com47 min readTLDR Dev

CODING AGENTS & COMPLEXITY BUDGETS

Cursor migrated from a headless CMS to raw code and Markdown after realizing the CMS created unnecessary abstraction and slowed down content updates. They used Cursor's AI coding agents and completed the migration in just three days, spending only $260 in tokens to automate content export, conversion, and codebase refactoring.

2025.12.15
leerob.com7 min readTLDR Dev

YOU SHOULD NEVER BUILD A CMS

The Cursor migration from Sanity to a markdown and Git-based system mentioned above was responded to by Sanity. Sanity acknowledged valid frustrations with clunky preview workflows, authentication fragmentation, and AI agent accessibility. However, they still found that Cursor's new system still has trouble at scale due to issues like content denormalization, poor collaboration, and limited querying capabilities for AI.

2025.12.15
sanity.io13 min readTLDR Dev

HOW GOOD ENGINEERS WRITE BAD CODE AT BIG COMPANIES

Big tech companies produce surprisingly sloppy code because most code changes are made by engineers who are relative beginners to the specific codebase, programming language, or system they're working on. This happens due to high employee turnover, frequent internal reorganizations, and compensation structures that incentivize job-hopping.

2025.12.15
seangoedecke.com8 min readTLDR Dev

HOW TO LOAD CSS (FAST)

Compression dictionaries have the potential to revolutionize the way CSS is served to users, as they significantly reduce costs.

2025.12.15
calendar.perfplanet.com8 min readTLDR Dev

ENGINEERING INTELLIGENCE

Intelligence is engineered, not trained: models are components, systems create value, and engineering makes machine learning real.

2025.12.15
gist.github.com9 min readTLDR Dev

USE PYTHON FOR SCRIPTING!

Python is great for scripting due to its widespread availability, standardized library, and clearer syntax.

2025.12.15
hypirion.com8 min readTLDR Dev

Sponsored

YOU?

Overprovisioning Kubernetes? If you're spending more than 30% of your cloud resources on inefficient, overly complex Kubernetes deployments, this Qovery guide [5] is for you.

2025.12.12
eu1.hubs.lySponsorTLDR Dev

DENIAL OF SERVICE AND SOURCE CODE EXPOSURE IN REACT SERVER COMPONENTS

The React team has disclosed new high-severity Denial of Service (DoS) and medium-severity Source Code Exposure vulnerabilities in React Server Components. The DoS allows malicious requests to hang servers, while the exposure can leak hardcoded secrets from server functions, though neither enables Remote Code Execution. These issues are follow-ups to the recent React2Shell vulnerability. Previous patches (19.0.2, 19.1.3, and 19.2.2) were incomplete.

2025.12.12
react.dev6 min readTLDR Dev

RED HERRINGS AND AI SLOP: DEBUNKING REACT2SHELL MISINFORMATION

This article debunks widespread misinformation about the React2Shell vulnerability, explaining how React's 700-line obfuscated patch led researchers and AI tools to chase false leads like the $F primitive and property traversal gadgets that couldn't actually be exploited. The real vulnerability occurs much earlier in the RSC request lifecycle than expected, affecting any server processing RSC requests through multipart/form-data payloads with specific Flight protocol operators.

2025.12.12
miggo.io8 min readTLDR Dev

PROGRAMMERS AND SOFTWARE DEVELOPERS LOST THE PLOT ON NAMING THEIR TOOLS

Modern software development increasingly uses obscure or "fun" names for tools and libraries, rather than descriptive ones, causing a cognitive burden for developers. This is different from other engineering fields and earlier programming practices, which prioritize clarity and function in their naming.

2025.12.12
larr.net8 min readTLDR Dev

CRAFT SOFTWARE THAT MAKES PEOPLE FEEL SOMETHING

This dev paused his development on Boo, a personal code editor they built solely for themselves, to work on a new programming language. Boo was never intended for mainstream use or open-sourcing, and the repetitive work of it ruined their joy and ability to create inspiring software.

2025.12.12
rapha.land3 min readTLDR Dev

Sponsored

SHOPIFY'S WINTER '26 EDITION PUTS AI AGENTS IN THE DRIVER'S SEAT

Shopify's developer platform is now AI-native [10]. Your AI agents can create dev stores, scaffold apps, run GraphQL operations, and generate validated code across Shopify. The shopify.dev docs now render for LLM access on the server side - allowing agents to deliver more accurate code and answers. See all the new developer features

2025.12.12
shopify.comSponsorTLDR Dev

INTRODUCING GPT-5.2

OpenAI has launched GPT-5.2, its most advanced frontier model, designed for professional knowledge work and long-running agents. This new model sets state-of-the-art benchmarks across various areas, including coding, long-context understanding, vision, tool-calling, and factuality, performing at or above human expert levels in knowledge tasks.

2025.12.12
links.tldrnewsletter.com20 min readTLDR Dev

VOTE FOR THE WEB FEATURES YOU WANT TO SEE

A new upvote system has been launched across web platforms like web.dev and caniuse.com for devs to directly vote for which web features are most important to them for browser vendors to prioritize.

2025.12.12
web.dev5 min readTLDR Dev

AN SVG IS ALL YOU NEED

SVG files can be used to create interactive, permanent, and shareable environments for scientific papers. They are powerful vector graphics that can embed data, be processed client-side to generate visualizations, and have interactive controls without server-side support. This makes them durable and easily shareable.

2025.12.12
jon.recoil.org4 min readTLDR Dev

PRODUCT ENGINEERING TEAMS MUST OWN SUPPLY CHAIN RISK

Modern software products are assembled from various third-party components, creating a complex "software supply chain" that is an easy target for attacks due to historically implicit trust. This vulnerability leads to risks like credential theft and widespread compromise, negatively impacting product outcomes, customer trust, and business revenue. The solution is to make trust explicit and verifiable using cryptographic attestations and frameworks to prove the origin and integrity of dependencies.

2025.12.12
hyperact.co.uk12 min readTLDR Dev

BIDICALC

bidicalc is a bidirectional calculator that can change variable cells so that formula results match changes made.

2025.12.12
victorpoughon.github.io7 min readTLDR Dev

DEPRECATE LIKE YOU MEAN IT

Traditional deprecation warnings are ineffective, so a funny way to force migration to newer versions is to make deprecated functions progressively return incorrect results.

2025.12.12
entropicthoughts.com3 min readTLDR Dev

Sponsored

COMPANY

9 months ago, Sourcegraph launched Amp as an experimental coding agent - and it quickly grew to become one of the leading coding agents.

2025.12.11
ampcode.comSponsorTLDR Dev

HOW GOOGLE MAPS QUIETLY ALLOCATES SURVIVAL ACROSS LONDON'S RESTAURANTS - AND HOW I BUILT A DASHBOARD TO SEE THROUGH IT

Google Maps algorithms influence London's restaurant scene as it acts as a “market maker,” using prominence signals that create a cumulative advantage for some restaurants. This was done by scraping data from over 13,000 establishments and building a machine-learning model. To counter this, this dev developed a dashboard that identifies "underrated gems" by calculating the divergence between a restaurant's actual rating and its algorithmically predicted performance.

2025.12.11
laurenleek.substack.com12 min readTLDR Dev

HOW TO IMPLEMENT IOS WIDGETS IN EXPO APPS

Despite widgets requiring native Swift code, you can use Expo and the `@bacons/apple-targets` plugin to integrate them together. This setup allows the React Native app and Swift widget to share data via App Groups and deep link back to the main app for expanded features.

2025.12.11
expo.dev7 min readTLDR Dev

GETTING A GEMINI API KEY IS AN EXERCISE IN FRUSTRATION

Getting a Google Gemini 3 Pro API key in the Google Cloud Console is unintuitive. This is because Google Cloud has many identically named products, a complex billing setup, and an identity verification process.

2025.12.11
ankursethi.com10 min readTLDR Dev

WHAT ACTUALLY MAKES YOU SENIOR

The one core skill that separates senior engineers from everyone else is the ability to reduce ambiguity. Senior engineers ask questions nobody else asks, separate what matters from the noise, and identify what should be done now. They're worth their salaries because they derisk projects. When senior engineers do this well, it looks easy.

2025.12.11
terriblesoftware.org4 min readTLDR Dev

Sponsored

ADD "SIGN IN WITH VERCEL" TO YOUR APP

Let users authenticate with their Vercel accounts. Setup takes minutes: create an integration in Vercel's developer settings, add credentials to Clerk, and enable it in your sign-in component. Ideal for tools that integrate with Vercel's API or target the Vercel ecosystem. Full setup guide in our docs [10].

2025.12.11
go.clerk.comSponsorTLDR Dev

NUCLEATE

Nucleate is an AI-powered platform that lets users build, customize, and export beautiful, production-ready React Native mobile apps from plain English descriptions. It has support for cloning, forking, and exporting apps, along with basic design system integration.

2025.12.11
nucleate.devToolTLDR Dev

PYTHON WORKERS REDUX: FAST COLD STARTS, PACKAGES, AND A UV-FIRST WORKFLOW

Python Workers allow Python developers to ship Python globally in less than two minutes in a single command. Python Workers now supports any package supported by Pyodide, the WebAssembly runtime that powers Python Workers. It also now has dedicated memory snapshots to reduce cold start times. This post shares some of the technical details behind the changes.

2025.12.11
blog.cloudflare.com9 min readTLDR Dev