Who Handles Your Security Reviews?

kept by samuelchen sep 09

LLMs can both detect and introduce security flaws, so developers should adopt regular security reviews using tools, humans, or ecosystem programs.

AI rewards strict APIs
Strict APIs with typed interfaces and validated schemas give AI agents tight feedback loops, reducing debugging and token costs, while loose APIs create ambiguity that slows agents down.
also on Drupal, #open-source, #ai-coding, #developer-tools
Nanolang: A tiny experimental language designed to be targeted by coding LLMs
Nanolang is a minimal experimental language with prefix notation and compile-time tests, designed to reduce coding errors made by LLMs.
also on FreeBSD, Claude, #open-source, #ai-coding, #developer-tools
What are you doing this weekend?
A developer recounts returning to FreeBSD for a home NAS after years on Linux, praising its simplicity for servers but sticking with Arch for desktops.
also on FreeBSD, #open-source, #developer-tools
Bun 1.4 | Bun Blog
Bun 1.4 rewrites the runtime in Rust, adds built-in headless browser automation, image and markdown APIs, boosts Node.js compatibility, and reduces CPU and memory usage.
also on Node.js, #rust, #open-source, #ai-coding, #developer-tools
Nub — an all-in-one toolkit for Node.js
Nub is a TypeScript-first toolkit for Node.js that provides a faster npm/pnpm run, a pnpm-compatible package manager, and a Node version manager, with no lock-in.
also on Node.js, #rust, #open-source, #developer-tools