Lessons we’ve learned on real projects (page 25)
The links, tools and tips our engineers and designers share with each other, one “today I learned” at a time.
- lessons shared
- 3,447
- people sharing
- 86
- database started in
- 2016
securitylab.github.com
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests:
Combining the pull_request_target workflow trigger with an explicit checkout of an untrusted Pull Request is a dangerous practice that may lead to repository compromise.
Rebeca Sarai
Tech Insights· securitylab.github.com
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests:
From securitylab.github.com
Combining the pull_request_target workflow trigger with an explicit checkout of an untrusted Pull Request is a dangerous practice that may lead to repository compromise.
Shared by
Read on securitylab.github.com
survey.stackoverflow.co
Stack Overflow Annual Developer Survey 2024
In May 2024, over 65,000 developers responded to our annual survey about coding, the technologies and tools they use and want to learn, AI, and developer experience at work. Check out the results and see what's new for Stack Overflow users.
Pedro Bacelar
Tech Insights· survey.stackoverflow.co
Stack Overflow Annual Developer Survey 2024
From survey.stackoverflow.co
In May 2024, over 65,000 developers responded to our annual survey about coding, the technologies and tools they use and want to learn, AI, and developer experience at work. Check out the results and see what's new for Stack Overflow users.
Shared by
Read on survey.stackoverflow.co
newsletter.pragmaticengineer.com
Leading Effective Engineering Teams: a Deepdive
What makes software teams effective, and how do the TL, EM and TLM roles differ? An excerpt from Addy Osmani’s new book: Leading Effective Engineering Teams
Amanda Savluchinske
Tech Insights· newsletter.pragmaticengineer.com
Leading Effective Engineering Teams: a Deepdive
From newsletter.pragmaticengineer.com
What makes software teams effective, and how do the TL, EM and TLM roles differ? An excerpt from Addy Osmani’s new book: Leading Effective Engineering Teams
Shared by
Read on newsletter.pragmaticengineer.com
freepublicapis.com
A Collection of Free Public APIs That Is Tested Daily
A collection of Free Public APIs for Students and Developers. Tested every single day.
Vitor Rangel
Tech Insights· freepublicapis.com
A Collection of Free Public APIs That Is Tested Daily
From freepublicapis.com
A collection of Free Public APIs for Students and Developers. Tested every single day.
Shared by
Read on freepublicapis.com
rspack.dev
Rspack, a Webpack alternative
Today Rspack has reached a new milestone - 1.0. This means that Rspack is production-ready, covers most of webpack's APIs and features, and is now prepared to support more users.
Raí Siqueira
Tech Insights· rspack.dev
Rspack, a Webpack alternative
From rspack.dev
Today Rspack has reached a new milestone - 1.0. This means that Rspack is production-ready, covers most of webpack's APIs and features, and is now prepared to support more users.
Shared by
Read on rspack.dev
uxdesign.cc
*The availability heuristic:* Avoiding over-reliance on recent or easily recalled information
Pedro Bacelar
Tech Insights· uxdesign.cc
*The availability heuristic:* Avoiding over-reliance on recent or easily recalled information
Shared by
Read on uxdesign.cc
figma.bot
It’s now possible to transfer project to clients as part of the offboarding so they can keep working with the Figma file without it being tied to the contractor’s organization
Who can use this feature All plans Admins only Transfer plan requirements Action Sender Destination Transfer or copy a folder Starter, Professional, Education, Organization, Government, an...
Pedro Bacelar
Tech Insights· figma.bot
It’s now possible to transfer project to clients as part of the offboarding so they can keep working with the Figma file without it being tied to the contractor’s organization
From figma.bot
Who can use this feature All plans Admins only Transfer plan requirements Action Sender Destination Transfer or copy a folder Starter, Professional, Education, Organization, Government, an...
Shared by
Read on figma.bot
promptarmor.substack.com
security vulnerabilities become more elaborate with AI, but first principles are the same
Matheus Deister
Tech Insights· promptarmor.substack.com
security vulnerabilities become more elaborate with AI, but first principles are the same
Shared by
Read on promptarmor.substack.com
boundaryml.com
BAML fixes broken JSON in LLM outputs, like trailing commas, unquoted keys, unescaped quotes, new lines, and even fractions.
BAML is one toolchain from the compiler to production. Build, test, trace, query, and alert on your code with tools that all read the same types.
Flávio Juvenal
Tech Insights· boundaryml.com
BAML fixes broken JSON in LLM outputs, like trailing commas, unquoted keys, unescaped quotes, new lines, and even fractions.
From boundaryml.com
BAML is one toolchain from the compiler to production. Build, test, trace, query, and alert on your code with tools that all read the same types.
Shared by
Read on boundaryml.compromptvibes.com
The ultimate collection of prompts for ChatGPT 3.5/4, Bard, Claude & AI-powered Prompt Generator
Ellias Silva
Tech Insights· promptvibes.com
The ultimate collection of prompts for ChatGPT 3.5/4, Bard, Claude & AI-powered Prompt Generator
Shared by
Read on promptvibes.com
Tech Insights· youtube.com
Postgres can be made ultra-fast for time based data
Shared by
Read on youtube.com
buttondown.com
Locality of Behaviour, another name for the opposite of Change Amplification:
This month’s Stack Report is the first of a two-parter. I’m also making it freely available to all, since it touches on topics I talked about in my recent DjangoCon Europe talk in Vigo, and I want to expand on …
Flávio Juvenal
Tech Insights· buttondown.com
Locality of Behaviour, another name for the opposite of Change Amplification:
From buttondown.com
This month’s Stack Report is the first of a two-parter. I’m also making it freely available to all, since it touches on topics I talked about in my recent DjangoCon Europe talk in Vigo, and I want to expand on …
Shared by
Read on buttondown.com
Tech Insights· thwack.solarwinds.com
How to choose between hash and b-tree indexes in Postgres
Shared by
Read on thwack.solarwinds.com
Book a call
Found it useful?
Let’s put it to work.
Tell us about your product and the problem in front of you. We’ll bring what we’ve learned on real projects.
Tell us about your product, and we’ll bring what we’ve learned.
Still prefer the good old email? Contact us
