weeklyfoo #144 is here: your weekly digest of all webdev news you need to know! This time you’ll find 32 valuable links in 5 categories! Enjoy!
🚀 Read it!
- What Happens When You Run a GPU Kernel: A step-by-step breakdown of what the CPU, driver, and GPU actually do during kernel execution — from pushbuffer writes to warp scheduling by Fergus Finn / engineering, gpu, performance / 34 min read
📰 Good to know
- Code Is the Easy Part: How a startup untangled a billing system by simplifying the data model and encoding unrecorded business rules, cutting invoicing time from a week to two days by Swizec Teller / engineering / 15 min read
- What Happened After 2,000 People Tried to Hack My AI Assistant: Prompt injections are still a real security problem but defenses are getting better — field notes from opening an AI assistant to public attack by Fernando Iturriaga / ai, security / 5 min read
- Iterating Faster on VS Code with TypeScript 7: How the VS Code team adopted the Go-based TypeScript 7 compiler incrementally — type-checking dropped from 36s to 5s, watch mode from 80s to 20s by VS Code Team / typescript, engineering, tooling / 15 min read
- Deno 2.9: Native desktop app packaging, 2x faster cold starts, quick migration from npm lockfiles, and a target of Node.js 26 compatibility by Bartek Iwańczuk / javascript, deno, tooling / 30 min read
- A Peek Into Reddit’s Anti-Spam Internals: How a leaked debugging glitch revealed Reddit’s moderation stack, including its spam-detection algorithms and use of the Perspective API by Lyra / engineering, security / 34 min read
- I Ported Kubernetes to the Browser: webernetes is a TypeScript port of Kubernetes that runs pod lifecycles, deployment tracking, and simulated networking entirely in the browser by Sam Rose / engineering, kubernetes / 16 min read
- New SQL Standard Features With Postgres Implications: QUALIFY, INSERT … BY NAME, and JOIN TO ONE were adopted into the draft SQL standard at the latest standards meeting, with an update on the still-debated ‘key joins’ proposal by Peter Eisentraut / database, postgres, sql / 7 min read
- Meta’s AI Storage Blueprint at Scale: How Meta rebuilt its BLOB storage metadata subsystem with tiered caching and prefetching to keep GPUs fed and speed up AI research velocity by Meta Engineering / ai, engineering, infrastructure / 16 min read
- CVE-2026-48931 Shouldn’t Have Been a CVE: Matteo Collina on why his own http.Agent security fix should have shipped as ordinary hardening, not a CVE, and how it broke node-fetch@2 users across Google APIs, Firebase, and Backstage by Matteo Collina / node, security, engineering / 16 min read
- npm Locks High-Impact Accounts After Recovery Actions: Maintainers of the most popular packages are now locked into 72 hours of read-only mode after changing their email or using a 2FA recovery code by GitHub / npm, security, supply-chain / 4 min read
- Building an Intern: How the team built Junior, an AI intern in Slack that takes instructions, does research, and gets steered by reviewers, over four months of development by cra.mr / ai, agents / 23 min read
- Skill Engineering and the Case Against One-Shot AI Design: Agents need domain knowledge, context, and carefully defined ways for humans to steer results: a case against expecting one-shot AI design by Latent Space / ai, agents / 7 min read
- How OpenAI Delivers Low-Latency Voice AI for 900M Users: Splitting voice AI infra into a stateless edge relay and a stateful transceiver, encoding routing metadata into the ICE ufrag to avoid database lookups on the hot path by ByteByteGo / engineering, infrastructure, ai / 15 min read
- Introducing the Safari MCP Server for Web Developers: Apple’s new Safari MCP server lets AI coding agents inspect the DOM, console, network, performance, and accessibility of a local Safari browser by WebKit Team / ai, tools, web / 9 min read
- The Hidden Cost of Hydration Mismatches: How a single hydration mismatch, combined with web font swapping, can push a React page’s Largest Contentful Paint from green into the red by Ivan Akulov / react, performance, frontend / 5 min read
🧰 Tools
- 12 Factor Agents: Principles for building reliable LLM-powered applications, inspired by the 12-factor app methodology by HumanLayer / ai, agents, framework
- Astryx: Meta’s open-source design system powering 13,000+ apps — 150+ accessible components, no styling lock-in, and an API designed for humans and AI assistants alike by Meta / design, open-source
- Copybara: A tool for transforming and moving code between repositories, keeping a confidential repo and a public repo in sync from one authoritative source by Google / git, tooling, open-source
- tiks: Procedural UI sounds for the web — generates click, toggle, success, and error sounds at runtime via oscillators and gain envelopes, at ~2KB gzipped by rexa-developer / web, audio, tooling
- pgrust: An AI-Assisted Rewrite of Postgres in Rust: Not production-ready, but it already passes Postgres’ own regression tests — built by running eight Codex agents in parallel by Michael Malis / database, rust, ai
- Skills by Builder.io: Small composable skills for coding agents that extend Claude Code and Codex with planning, code review, auditing, and documentation verification by Builder.io / ai, agents, tools
- FixCSS: A library that converts CSS written in an improved, corrected syntax into browser-compatible CSS, fixing design mistakes catalogued by the CSS Working Group by Declan Chidlow / css, tooling
- OpenWiki: CLI that generates and maintains agent-focused documentation for codebases, with commands to initialize, update, and customize model settings by LangChain / ai, agents, docs, tools
- Oak: Version control built for agent workflows — content-addressed storage gives instant branch cloning, and working trees mount in about a second without a full git-style clone by Oak / git, tools, ai
- cmux: Ghostty-based macOS terminal with vertical tabs, split panes, an embedded browser, and a socket API for running AI coding agents in parallel by manaflow-ai / terminal, tools, ai
- Weave Router: Local model router that picks the best LLM for each prompt in under 50ms and cuts inference costs 40-70% without ever sending API keys off-device by Weave / ai, llm, tools
- ZeroFS: Open-source filesystem that makes S3-compatible object storage behave like a high-performance, encrypted POSIX filesystem or block device by ZeroFS / storage, filesystem, open-source
🤪 Fun
- Where to Find the Colors Your Screen Can’t Show You: A journey through real-world colors screens still can’t reproduce, despite P3, OKLCH, and other expanding color gamuts by Ryan Moulton / science, color, fun / 36 min read
📺 Videos
- Modern UI Patterns: A CSS Day talk on the newest updates in CSS and web UI, plus a 5-principle UX framework for framing modern design decisions by Una Kravets / css, design, talk
- We Built a P2P App With No Servers — 1M Users Didn’t Miss Them: The original author of Node Cookbook shows how his team built a production peer-to-peer app from scratch with no cloud, no infrastructure, and no vendor lock-in, scaling past a million users by David Mark Clements / p2p, architecture, talk
- Building Great Agent Skills: The Missing Manual: A practical talk on designing, structuring, and maintaining Skills that coding agents can reliably use by AI Engineer / ai, agents, talk