Relying heavily on external codebases can create risks like security vulnerabilities, dependence on third-party maintenance, and ongoing integration work. It's fine to sometimes replicate external code from packages in internal codebases because this gives developers better control and security over that code.
Sponsored
This collection of Datadog resources [11] is worth a bookmark for any front-end developer (or anyone who finds themselves doing front-end work). It includes a technical best practices guide, a solutions brief on catching and resolving issues proactively, and a popular recorded webinar on how to better monitor and optimize front-end apps. Access
HumanifyJS is a tool that uses LLMs and Babel to deobfuscate, unminify, transpile, decompile, and unpack JavaScript code, making it more readable for humans.
Facad is a colorful directory listing tool for the command line that features emoji-based file and directory icons, sorted output, support for symlinks and executables, and customizable column width.
EvolutionAPI is an open-source WhatsApp integration API that provides a RESTful API service for controlling WhatsApp functions, allowing users to create multiservice chats, service bots, and other systems utilizing WhatsApp.
AI companies face economic challenges due to the high costs of building and maintaining models. As newer and more advanced LLMs emerge, older ones quickly become obsolete, making it easy for a company to be left behind. Now, companies must either spend enormous amounts of money to stay ahead or risk falling behind and losing market share.
Epic Games is suing Google and Samsung. The lawsuit focuses on Samsung's "Auto Blocker" feature, which makes it difficult for users to install apps from third-party stores. Epic argues that Auto Blocker is designed to protect Google and Samsung's app stores, not users, and that it is blocking the growth of the Epic Games Store.
The difference between delivery and processing in messaging systems is that delivery refers to the act of successfully transferring a message to a receiver, while processing covers the entire message lifecycle, including delivery, processing by the receiver, and acknowledgement. Sequin is a Postgres streaming library that prioritizes exactly-once processing by making sure that every message is delivered, processed, and acknowledged without duplication. Achieving exactly-once delivery is practically impossible due to the two-phase commit problem - confirming the simultaneous confirmation of message delivery across different locations.
Bop Spotter is an experimental project that is using a modified Shazam app attached to a pole to monitor music trends in San Francisco's Mission district.
“Boring” code is the best kind of code because it allows teams to focus on solving business problems without the distraction of technical complexities.
Despite claims from large tech companies, achieving artificial general intelligence (AGI) with human-level cognition is still far away due to the need of both further improvements in AI along with more compute power.
Y Combinator is experiencing a decline due to its overemphasis on growth over prestige.
Sponsored
In celebration of its 14th Birthday Week, Cloudflare has recently announced loads of new developer platform [5] product updates [4]:
Python 3.13 (officially releasing on October 1) introduces two major changes: a "free-threaded" version that allows disabling the Global Interpreter Lock (GIL), potentially boosting multi-threaded performance, and experimental Just-in-Time (JIT) compilation, which could improve performance over time. The GIL removal addresses Python's limitations in fully utilizing multi-core processors, while the JIT compiler promises to optimize code execution by generating machine code on the fly.
An engineering manager at Riot Games proposes a taxonomy for categorizing tech debt based on three metrics: impact, fix cost, and contagion. The impact measures the negative effects of the debt, fix cost assesses the resources needed to rectify it, and contagion quantifies its potential spread. He identifies four types of tech debt: local debt, MacGyver debt, foundational debt, and data debt, each with unique characteristics and strategies for mitigation.
2024.09.30·links.tldrnewsletter.com·20 min read·TLDR Web Dev This blog post goes through implementing a serverless ACID database using 500 lines of Go code with no external dependencies. It uses atomic “PutIfAbsent” operations on a file system-based object store to achieve concurrency control and snapshot isolation. Working code examples are shown throughout the post.
Using types in programming is similar to color-coding wires in an electrical system. Types act as labels, making it easier to understand the flow of data in code and preventing mismatches. They also provide automatic error checking and make it simpler to identify and fix issues, so they should always be used in complex codebases.
This software testing expert is frustrated with the overhyped and often ineffective use of AI in various domains. He feels that AI's current applications often lack depth and fail to replace human creativity and critical thinking. He especially dislikes the mindless adoption of AI without considering its real value and impact.
Writing code for humans is much harder than writing code for computers because it involves understanding and catering to a user's mental model of the code. To do this well, devs should prioritize user onboarding, provide clear examples rather than abstract concepts, and create a user-friendly experience by minimizing conceptual overload.
Sponsored
* From signup to globally deployed in <5MIN * Your code runs within MILLISECONDS of your users worldwide * Say goodbye to cold starts—support for 0MS WORLDWIDE * Persistent logs for every Worker
Better Auth is a framework-agnostic authentication and authorization library for TypeScript. It provides a consistent API and has a plugin ecosystem. Better Auth supports features like email & password authentication, account and session management, rate limiting, database management, social sign-on, organization and access control, two-factor authentication, and more.
2024.09.30·links.tldrnewsletter.com·GitHub repository·TLDR Web Dev Pagoda is a starter kit for Go web development. It uses libraries like HTMX and Alpine.js to create a modern UI without relying on JavaScript. Pagoda is built on a foundation of popular frameworks like Echo for backend and Ent for ORM, with SQLite as the default database.
2024.09.30·links.tldrnewsletter.com·GitHub repository·TLDR Web Dev mitata is a benchmark tooling library for JavaScript and C++ that provides high-resolution timing, visualizations, and automatic garbage collection.
2024.09.30·links.tldrnewsletter.com·GitHub repository·TLDR Web Dev AI models are getting better thanks to human trainers who verify the accuracy and reliability of AI outputs. They teach models to avoid errors and hallucinations, while also providing high-quality data that makes the models' outputs better overall.
AlphaChip is a reinforcement learning method developed by Google that uses AI to create chip layouts in hours, a process that previously took weeks or months. It was created initially for Google's Tensor Processing Units (TPUs) and generates layouts that outperform human design. These layouts are used in chips worldwide.
While VSCode's source code is open, Microsoft uses a proprietary license for the downloadable product and strategically incorporates telemetry and other features that fracture the open-source community. This strategy creates legal barriers for companies like Gitpod, GitLab, and others who attempt to build competing products based on VSCode.
An open-source AI code editor was found to be calculating model usage client-side.
The open access of online resources has provided this author, along with many others, the skills and confidence needed to escape poverty and build a successful career.
While web components may have limitations, they offer a valuable tool for web dev and open up the creative possibilities of the web.
A visualizer of various statistics for a GitHub repository using D3.js.
2024.09.30·see-my-repo.netlify.app·GitHub repository·TLDR Web Dev Sponsored
Come to Algolia DevCon 2024 [4] to connect with other developers from the community, learn best practices, be inspired, and see what's new from Algolia.
Google advocates for Safe Coding, a secure-by-design approach that prioritizes using memory-safe languages, to eliminate memory safety vulnerabilities at scale. By transitioning to memory-safe languages for new code, Google observed a significant decline in memory safety vulnerabilities in Android, dropping from 76% to 24% over six years. This counterintuitive result is explained by the exponential decay of vulnerabilities over time, meaning older code becomes inherently safer.
This developer rebuilt their blog using Next.js's App Router, MDX for content management, Linaria for styling, Shiki for code snippets, and Sandpack for interactive code playgrounds. They share their experience, challenges, and workarounds for each technology along with demonstrative code examples.
Cloudflare's Durable Objects offer SQLite storage which allows zero-latency database access within application code. This eliminates network communication overhead by embedding the database directly within the Durable Object. Its storage service uses local disk caching and object storage for high availability.
This developer built a large-scale service and found certain principles reappearing throughout the implementation. It's useful to prioritize a single source of truth and minimize mutable state when building something from scratch. Developers should also make sure not to abstract things prematurely and not to overuse mocks when writing tests for their code.
Generalists have a broad understanding of various tech domains. Specialists dive deeply into a specific area. Both have their merits, though generalists usually will be found in leadership positions, while specialists push technical boundaries.
Sponsored
Dev Starter Pack launched today, the essential startup starter kit. It's 10 DevTools you can start using for free with the promo code
PostgreSQL 17 has huge performance improvements, including optimized memory management, faster I/O operations, and better query execution. The release also expands the developer experience with features like the SQL/JSON JSON_TABLE command, improved logical replication for high availability, and better security and operations management. It has a new collation provider for immutable sorting and streamlined upgrades for logical replication.
Haystack Editor is a canvas UI for code understanding, editing, and lightweight debugging. It is an IDE built on top of a canvas that allows for easier navigation through a codebase.
Avatars is a collection of free avatar images from across the web.
This indie app developer has been struggling to maintain access to Google Drive on its Android app due to Google's ever-changing API policies and security requirements. This has resulted in a frustrating and costly process, forcing the company to pay for an annual audit. The situation has become untenable, so the developer is now focusing on other platforms and a B2B model where it can control its software development and avoid the complexities and costs associated with the Android ecosystem.
This article goes over lesser-known tricks, quirks, and features of the C programming language that can be confusing even for experienced developers. Examples include obscure syntax variations like digraphs and trigraphs to advanced techniques such as X-macros and compile-time assumption checking using enums. There are also discussions on features such as bit fields, flexible array members, and the infamous comma operator.
OpenAI is restructuring its core business into a for-profit benefit corporation, giving CEO Sam Altman equity for the first time and removing non-profit board control.
WordPress.org has banned WP Engine from accessing its resources, including themes and plugins, due to a dispute over trademark infringement and WP Engine's alleged lack of contribution to the WordPress community.
This developer redesigned their personal website, migrating from Gatsby to Astro, which they found gave better performance and cleaner design.
Using callbacks in React components allows child components to notify their parent of actions without directly manipulating the parent's state.