urban weekly #104

If you are good at code review, you will be good at using AI agents - Using AI agents correctly is a process of reviewing code. If you’re good at reviewing code, you’ll be good at using tools like Claude Code, Codex, or the Copilot coding agent. ai

Dev Culture Is Dying The Curious Developer Is Gone - From tinkerers to metric seekers: How the shift in developer culture is impacting innovation and creativity. engineering

Why Local-First Apps Haven’t Become Popular? - Offline-first apps promise instant loading and privacy, but in practice, very few apps get offline support because getting sync right is surprisingly hard. local-first 🔥

Things I Believe - Ten topics. engineering, growth 🔥

Cap'n Web - A new RPC system for browsers and web servers javascript, rpc

Getting AI to Work in Complex Codebases - It seems pretty well-accepted that AI coding tools struggle with real production codebases. ai, engineering

MESH - I tried HTMX, then ditched it htmx

The Risks of NPM - In this post, I’m talking about the Qix incident. npm, security

Your Images Are (Probably) Oversized - Are you setting the sizes attribute on your img tags? img, html

Why you should replace PostgreSQL with Git for your next project - Every developer knows the pain of choosing the right database for their project. database, git

PostgreSQL 18 Released! - Next major release of Postgres postgres

Announcing Cloudflare Email Service’s private beta - Feature to send emails email, cloudflare 🔥

Ollama Web search - A new web search API is now available in Ollama. ai, ollama, search

Our plan for a more secure npm supply chain - Addressing a surge in package registry attacks, GitHub is strengthening npm’s security with stricter authentication, granular tokens, and enhanced trusted publishing to restore trust in the open source ecosystem. security, npm, supply-chain

An AI tool I find useful - One of the tasks that I do most often is to review code. I've written a review command that asks an AI to review a code sample, and I've gotten a lot of value out of it. ai

Top Programming Languages 2025 - JS and TS in Top 10! programming, languages

GitHub Copilot CLI is now in public preview - We’re bringing the power of GitHub Copilot coding agent directly to your terminal. With GitHub Copilot CLI, you can work locally and synchronously with an AI agent that understands your code and GitHub context. ai, cli, github, copilot 🔥

Auth.js is now part of Better Auth - Auth.js, formerly known as NextAuth.js, is now being maintained and overseen by Better Auth team auth

First Malicious MCP in the Wild - The Postmark Backdoor That's Stealing Your Emails mcp, security 🔥

Wild Performance Tricks - The tricks here are a few of my favourites that I’ve used in the Wild linker. rust, performance, linker 🔥

Context is Key - How HubSpot Scaled AI Adoption ai, adoption

NPM Security Best Practices - How to stay safe from NPM supply chain attacks security, npm 🔥

Feedmaker - Make your own feed rss

Cachey - Read-through cache for object storage object-storage

FumaDocs - The beautiful & flexible React.js docs framework. docs 🔥

TanStack Start v1 Release Candidate - Full-stack Framework powered by TanStack Router for React and Solid tanstack, tanstart 🔥

Dolphin - Document Image Parsing via Heterogeneous Anchor Prompting ocr

Spec Kit - An effort to allow organizations to focus on product scenarios rather than writing undifferentiated code with the help of Spec-Driven Development. spec, development