Bookmarks

For enterprise software, the software supply chain presents some of the biggiest risks today to data privacy and security.

Scale your Rails app without rewrites. Learn to keep business logic in Ruby and delegate heavy work to specialized tools, built with Go, C, and Rust, for performance and scalability.

pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.

The 1Password browser extension is now available in Comet, the AI-powered browser by Perplexity, giving you secure, end-to-end encrypted access to your credentials and sensitive information as you explore the AI-powered internet.

Post-quantum cryptography protects against quantum threats using today’s hardware. Quantum tech like QKD may sound appealing, but it isn’t necessary or sufficient to secure organizations.

A practical guide to securing MCP model–agent interactions: prevent prompt injection, privilege escalation, replay attacks, and data exfiltration with validation gateways, signing, DLP, and scoped creds.

We replaced slow JSON path lookups with Bloom filters in our global routing service, cutting memory usage by 15% and reducing 99th percentile lookup times from hundreds of milliseconds to under 1 ms. Here’s how we did it.

How and why to use the Outbox pattern to build a robust event-driven system.

A deep dive into horizontal scaling: how we sharded our core db without any downtime or dropped requests.

HTML forms library for ruby. Contribute to jeremyevans/forme development by creating an account on GitHub.

Pidfd implementation for the Ruby language. Contribute to mensfeld/pidfd development by creating an account on GitHub.

Find the mime type of files, examining file, filename and declared type - rails/marcel

Simple, extremely lightweight, extensible, configuration management library for Go. Supports JSON, TOML, YAML, env, command line, file, S3 etc. Alternative to viper. - knadh/koanf

Explore building a simple VM in Go using stack-based architecture. Learn the fundamentals of virtual machines through hands-on implementation.

I was at a ContainerDays conference recently and attended a great talk from Nikolay Kuznetsov about the Outbox pattern and resilient system…

Dependabot can now update private Go modules hosted on enterprise registries and behind GOPROXY-compatible private proxies, as well as public modules, within the same workflow. This enables automated version and…

A web developers guide to browser internals

Bun deserves credit. It's fast, ambitious, and it shook a JavaScript ecosystem that had once been...

A drop-in replacement for react-markdown, designed for AI-powered streaming. - vercel/streamdown

Middleware is now stable in React Router!

Learn which tests actually matter for React development. From static tests to end-to-end testing, we'll explore the Testing Trophy approach and why integration tests deserve the spotlight.

Exploring how React's dominance by default stifles frontend innovation, and why deliberate framework choices lead to better tools for performance, developer experience, and ecosystem diversity.

An alternate reality where React hooks can be called conditionally.

Can I use React Server Components (RSCs) today. A project that shows the support of RSCs across the frameworks and libraries.

Overview This PR ships <Activity /> to the react@canary release channel for final feedback and prepare for semver stable release. What this means Shipping <Activity /> to canary means i...

Eventarc Advanced is a simple, unified messaging platform that can intelligently filter, transform, and centrally govern the flow of information to build event-driven architectures.