daily.dev · Popular · 实时热榜

npm 12 flips three install-time behaviors from opt-out to opt-in: allowScripts now defaults off (blocking preinstall/install/postinstall scripts and implicit node-gyp builds), --allow-git defaults to none (closing a code execution path via a dependency's own .npmrc overriding the Git executable), and --allow-remote defaults to none (blocking https tarball dependencies). Teams had warnings since npm 11.16.0 to prepare, and GitHub's migration guide recommends allowing what's already installed befo

Addy Osmani breaks down how he uses Claude Code's loop engineering primitives - goal (a bounded task driven to a measurable finish line by an evaluator model) and loop/schedule (recurring or interval-based reruns) - to manage 5-10 parallel agents daily. He walks through the Claude Code team's four loop categories (agentic, goal-based, time-based, proactive), shares real prompt examples for refactoring performance and triaging PRs/issues on his 80k-star Agent Skills repo, and stresses that develo

Nitrux has unveiled a new architecture called the Workspace Environment, a middle ground between minimal window managers and heavyweight desktop environments like GNOME or Plasma. It consists of four in-house QML/MauiKit components built on Hyprland: Valenz (a workspace bar), Marina (a dock), Workspace Settings (replacing KDE System Settings), and Desklock (a native lock screen derived from the QMLGreet codebase). Founder Uri Herrera replaced Waybar, SwayNC, Crystal Dock, and Hyprlock with these

“Something failed” is not a useful production log. Good logs should answer: What happened? Who triggered it? Which request handled it? Which entity was affected? How long did it take? What was the outcome? Prefer structured logs with correlation IDs, actors, operations, entity IDs, durations and statuses. Avoid logging complete request bodies. Passwords, tokens and payment details have a habit of becoming “temporary debugging information” forever. Can your logs reconstruct one failed request fro

A two-year retrospective on running REST and gRPC side by side in production concludes that gRPC delivers on its performance promises but imposes a steep, ongoing cost in legibility and universal tooling support. REST's human-readable, universally-inspectable HTTP requests made debugging, logging, and integration trivial, while gRPC's binary format required special tooling for even basic troubleshooting. The author argues that for most services, the operational convenience of REST outweighs gRPC

Instagram has refreshed its cursive wordmark logo for the first time in a decade, part of a broader brand identity overhaul from Meta that also touches typography, motion, and layout. The app icon remains unchanged for now. Adam Mosseri described the new look as cleaner and more modern while preserving the brand's original warmth. Reactions online have been mixed, with some users joking the new wordmark can be misread as 'Instagzam' and others missing the nostalgic old design. The full brand rol

A roundup of self-hosting news covers Planka removing SSO from its community edition in v2.2.0, sparking backlash over the so-called 'SSO tax' where enterprise features get paywalled after users have already adopted a tool. The newsletter offers a balanced take: the move is frustrating but developers are free to make unpopular business decisions, and users can fork, switch, or build alternatives. Also covered: a new native Nextcloud desktop/mobile app, ESPHome Starter Kits from the Open Home Fou

An experiment uses multiple AI agents (Claude, GPT, Gemini, and Kimi K2) to write scripts for Age of Empires II's built-in AI scripting language, then pits them against each other in free-for-all battles and full standard games. Claude consistently performed best, winning through both military and relic victories. The creator then built an automated genetic-programming loop using AutoDE (a GitHub tool that controls the mouse to run 1v1 tournaments) to iteratively evolve strategies overnight with

Almost every notable managed Postgres provider bundles a connection pooler like PgBouncer, according to a survey of major providers including AWS RDS, Azure, Google Cloud SQL, Supabase, Neon, DigitalOcean, and others. Only IBM Cloud and Oracle OCI lack a managed pooling option, and both are dismissed as unlikely choices outside enterprise sales cycles. The piece argues connection pooling is effectively a mandatory add-on because Postgres itself handles many connections poorly, and contrasts this

A B2B SaaS platform processes background jobs — report generation, data exports, invoice creation — through a single SQS Standard queue (message queue, all messages compete equally for consumer capacity) . There are 40 tenants sharing the queue. Each message carries a tenant_id field. Ten worker processes consume from the queue at a combined throughput of 800 messages per minute. For most tenants, jobs complete within 2–3 minutes of submission. The architecture has been stable for two years. Las

SvelteKit 3 has entered Release Candidate phase, bringing breaking changes from SvelteKit 2 alongside a migration tool (sv migrate). Key changes include moving configuration into vite.config.ts, replacing the $lib alias with Node subpath imports (#lib), simplified TypeScript config via $app/tsconfig, reworked service worker imports, more powerful explicit environment variables (now stable, not experimental), improved error handling via Svelte 5 error boundaries and handleError, sourcemapped stac

An ORM skeptic argues that with LLMs now capable of writing boilerplate code, the traditional justification for using ORMs (avoiding tedious SQL mapping code) largely disappears. The author contends that ORM query optimization already requires deep expertise and workarounds, undermining the promise of abstraction, and suggests it may be simpler to have an LLM write parametrized SQL directly rather than fight with an ORM's implicit API, while cautioning about SQL injection risks.

Despite social media claims that AI has killed coding interviews, CoderPad's State of Tech Hiring report shows technical assessments are up 48% globally since mid-2023, with 43% of companies still running classic algorithmic tests. Companies like OpenAI, Anthropic, and Meta run some of the strictest interviews, with Meta even building an AI-assisted round that candidates report is harder than the classic version. The argument is that interviews were never really about writing code but about judg

A hands-on benchmark built with a Node harness and a byte-counting TCP proxy measures the real wire cost of WebSocket, SSE, and long polling delivering 1,000 events. WebSocket used 119,692 bytes, SSE 131,596 (10% more), and HTTP/1.1 long polling 884,698 bytes (7.4x), mostly re-sent headers. On HTTP/2, long polling drops to 182,475 bytes (1.56x payload). Latency differences at low event rates were under 0.3ms across all three; long polling only degrades when events arrive faster than a round trip

Hi Persons, i am making a Rust version of Skyrim with Bevy, inspired by the OpenMorrowind. I want to make it and i will, this will help modders and gamers play this amazing game on Linux, android, windows and i am aiming for Mac too. But recreating the engine isn’t enough for me, i tough to my self. Why not making an modern launcher, make it a mod manager, so gamers can search, install and organize mods. But this is not enough, why not convert the game files? Let’s do that too, convert the files

A validator ran HTML and CSS checks against the Tranco top 5,000 domains, successfully reaching 2,655 home pages. 90.5% of those violate the HTML spec, with the most common issue being invalid element nesting (59.5% of sites), typically caused by framework-generated markup. Accessibility failures such as skipped heading levels, missing form labels, and empty link text each affect over a third of sites. CSS errors are less pervasive (65.1% of sites) but usually consist of a single broken declarat

The Chrome console warning about 'blocked aria-hidden on an element because its descendant retained focus' is correct, not a nag, and every popular workaround for it — blur() with no follow-up, setTimeout delays, stripping aria-hidden, or modal={false} — actively harms screen reader users by leaving focus stranded on or removing the modal focus trap entirely. The root defect is an ordering bug: code hides a region (via aria-hidden) while focus is still inside it, creating 'ghost focus' where a c

Introducing Transition Kit Opensource library of page and theme transitions, currently in beta: • 30+ transitions available • 4 theme toggle components with inbuilt theme transitions • install the theme toggle components via shadcn registry Try it here: link Please give a ⭐ if you like it GitHub: link

A developer shares that they processed $157,143 worth of tokens in a single month while only paying $400, using two $200/month subscriptions — OpenAI's Codex plan and Anthropic's Claude plan. The core argument is that AI labs are currently subsidizing usage heavily due to competitive pressure, and developers should take advantage of this pricing gap before it closes. The advice is simple: stop treating tokens as scarce, use flat-rate subscriptions aggressively, and ship projects now while the ec

Open formats and self-hosted tools are essential for preserving digital memories and documents against vendor lock-in and format obsolescence. LibreOffice can open dozens of legacy formats dating back to the 1980s and 90s, including Microsoft Works, ClarisWorks, and WordPerfect. Open video formats like Matroska, WebM, and Ogg ensure long-term video accessibility. Self-hosted cloud solutions like Nextcloud and ownCloud provide privacy-respecting alternatives to Google Drive and OneDrive, giving i

sqlfmt is a new opinionated SQL formatter inspired by gofmt, implementing the 'river alignment' style from The Art of PostgreSQL. It right-pads all clause keywords (select, from, where, group by, etc.) to the same column at each nesting level, creating a vertical river with expressions flowing to the right. The tool uses a tokenizer rather than an AST for robustness and comment preservation. It ships with a CLI mirroring gofmt's interface (-w, -l, -d flags), editor plugins for Emacs and Vim/Neov

free-my-arch is a Claude Code skill for Arch Linux that automates disk cleanup through a four-phase process: scan, report, confirm, and clean. It targets package caches (pacman, AUR/yay), dev caches (npm, pip, cargo, Go), Docker leftovers, and oversized home directory files. Nothing is deleted without explicit user approval — cache groups use a multi-select prompt, personal files are confirmed individually. Safety rules prevent glob-based rm, protect configs and browser profiles, and flag app da

A developer cancels $371/year in cloud storage subscriptions by setting up a self-hosted home server on a Mac Mini using open-source alternatives. The setup includes Immich for photo storage (replacing iCloud), Nextcloud for file sync (replacing Dropbox and Google Drive), Jellyfin for media streaming (replacing Netflix and Discovery+), and Audiobookshelf for audiobooks (replacing Audible). Docker is used to containerize all services, and Tailscale enables remote access. Total monthly savings com

pgrust 0.2 achieves 300x faster analytical query performance than Postgres on ClickBench, even outperforming ClickHouse. The post walks through three key query engine optimizations using Rust code examples: (1) batching — replacing row-at-a-time Volcano model calls with 1024-element batches, cutting time from 1.3s to 480ms; (2) operator fusion — combining sequential scan and aggregation into a single node to eliminate copy overhead, reaching 358ms; and (3) SIMD — using ARM NEON intrinsics to pro

CachyOS, a rolling-release Arch-based Linux distro, declined to join the Open Gaming Collective (OGC) when it launched, citing concerns about bureaucratic overhead, association with Web3-linked Playtron, and the rushed circumstances around Bazzite's involvement. Founder Peter Jung argued that CachyOS already collaborated with OGC members informally and that the OGC's upstream-first policy means improvements flow to all distros anyway. Six months later, CachyOS ranks second in Valve's Steam Hardw