Bookmarks

Committing prehydration crimes

A comprehensive guide to self-hosting Next.js in production with horizontal scaling, covering critical solutions for distributed caching, image optimization, reverse proxy configuration, and deployment challenges learned from real-world experience.

Runtime Accelerated Rendering Infrastructure (Rari): High-performance React Server Components framework powered by a Rust runtime, delivering 4x faster performance than Next.js with zero-config set...

A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background. ghcr.io is an OCI conformant registry for container images and OCI artifacts used by a lot of projects. It’s part of GitHub and is a very popular image and artifact repository used by open source projects.

Fast Rust-based web bundler

Send data, say goodbye, and move on. That's JavaScript's Beacon in one line.

A case study describing the business rationale, technical challenges, and impact of our migration to Node type stripping

Number formatting with units in JavaScript with Intl

Background Almost a decade ago, we began to add certain options beyond --noImplicitAny and --strictNullChecks. Flags like --strictFunctionTypes, --noImplicitThis, and --strictBindCallApply have bee...

A guide to schema import, archival policies, and automation

Using RLS can be cumbersome, because it's usually expected to rely on the user name. Could we use JWT to establish a 'trusted context'?

From reimagining storage to serverless computing, Aurora continues to push the boundaries of what's possible in database technology.

The Elegant Bundler for Libraries

Imagine the following problem: you need to process hundreds of records and generate a single output. One way to solve this is to process each record sequentially and unify the output only at the end. However, this can be extremely slow, depending on the time spent processing each record. Another way is to process them concurrently, speeding up the overall time. In my post about introduction to concurrency, I talked a bit about goroutines and channels. Now, I’ve decided to talk about waitgroups, a way to simplify the management of multiple goroutines.

Slices will surprise you

Accurate online converter. Convert any HTML input to Markdown output. Supports entire websites & emails. No invalid Markdown — it just works.

A visual introduction to big O notation.

OAuth was first introduced in 2007.

New GOMAXPROCS defaults in Go 1.25 improve behavior in containers.

Set up 3-Node highly available PostgreSQL cluster. Contribute to stormatics/pg_cirrus development by creating an account on GitHub.

A modern Git CLI tool with both traditional command-line and interactive incremental-search UI. - bmf-san/ggc

The PHP framework that gets out of your way. Contribute to tempestphp/tempest-framework development by creating an account on GitHub.

Tempest is a modern framework designed to enable developers to write as little framework-specific code as possible, so that they can focus on application code instead.

Signet is an OAuth 1.0 / OAuth 2.0 implementation. - googleapis/signet

Origin UI is an extensive collection of copy-and-paste components for quickly building application UIs. Powered by Tailwind CSS and React. - origin-space/originui

Components from design to production. Contribute to Chainlift/liftkit development by creating an account on GitHub.

Model Context Protocol (MCP) server for Kubernetes and OpenShift - containers/kubernetes-mcp-server

qwen-code is a coding agent that lives in digital world. - QwenLM/qwen-code

In this blog, we share a new finding in the XZ Utils saga: several Docker images built around the time of the compromise contain the backdoor. At first glance, this might not seem alarming: if the distribution packages were backdoored, then any Docker images based on them would be infected as well. However, what we discovered is that some of these compromised images are still publicly available on Docker Hub.