Last week was terrible. It didn't have to be
PHP2Shell scored a CVSS 9.2 and sent governments and ops teams into a panic. A week later, nobody has shown it working end to end, and the AI story behind it doesn't hold up.
Head of software engineering. I lead teams building high-traffic systems. Away from that I write small open source tools and self-host most of what I use. This is where I write about the work.
PHP2Shell scored a CVSS 9.2 and sent governments and ops teams into a panic. A week later, nobody has shown it working end to end, and the AI story behind it doesn't hold up.
I asked for a price on a few extra seats of software we already pay for. Two days and a pile of irrelevant questions later, I got one.
Most repos only run on the machines of the few developers who set them up. /groundwork is an agent skill that finds the missing env files, databases and docs, then fixes them.
I turned on Ring's End-to-End Encryption for a bit more privacy. Previews vanished, recordings broke and answering the door stopped working. Here's what happened.
Status pages are a single HTML page that somehow costs thousands. So I built an open source, config-as-code one on Cloudflare, almost entirely with agents.
AI-powered repository maintenance. Dependency updates, test generation, and custom code tasks shipped as clean PRs.
The easiest way to add Stripe payment plans to your app.
A suspicious login detector for your website or app.
A simple service to get cute dogs as placeholders for your websites and designs.
The simple way to build timeline Gantt charts.
Configurable status page software that runs on Cloudflare Workers.
Comprehensive health checks for Typescript and Javascript apps. Supports Express, Hono and Fastify.
GIFs in your menu bar, on Windows, macOS and Linux.