Next.js Security Update: December 11, 2025
Another week, another Next.js security problem.
Well, okay, two new security problems...
Why I Ignore The Spotlight as a Staff Engineer
Thoughts on, in effect, getting on with the job and not chasing the spotlight.
Critical Security Vulnerability in React Server Components – React
React doing React things...
Everything I know about good API design
Interesting article to consider when thinking about what is and isn't a good API design.
Mistakes I see engineers making in their code reviews | Hacker News
Interesting article relating to ideas on how to conduct a good code review. I've chosen to link to the Hacker News thread where I first found it, rather than the blog post itself, because this is one of those HN threads where the comments are a worthwhile read too.
Electrobun | Electrobun
A framework for building desktop applications in TypeScript, it seems. I don't think I've quite been grabbed by TypeScript yet, but this could push me over the edge into trying to properly get to grips with it as I can think of some desktop applications that I'd like to build.
PyPI+ - Python Package Explorer with Dependency Visualization | Search 500K+ Packages
Another handy tool for diving into the depdencies of Python packages as found on PyPI.
stelvio.dev: AWS for Python devs - made simple
A Python library that also builds out your deployment too.
The whole IAC thing bothers me because people say "code" but it's almost never actually code. This looks like it might end up actually putting the code in IAC.
Cucumber lets you write automated tests in plain language | Hacker News
Hacker news does Cucumber. Hot takes.
“Don’t Mock What You Don’t Own” in 5 Minutes
An interesting article on what should and shouldn't be mocked when writing tests.
The Line of Death
The most important part of the web browser UI is...
Asyncio Demystified: Rebuilding it From Scratch One Yield at a Time
How to do async in Python the hard way, as a way to learn how it works so you undersatnd things better when you do it the easy way.
How to Use Async Agnostic Decorators in Python
Interesting article on how you can go about writing Python decorators that are async-agnostic.
![A lisp implementation - Summary [Savannah]](https://rdl.ink/render/https%3A%2F%2Fsavannah.nongnu.org%2Fimages%2FSavannah.theme%2Ffloating.png?width=92&height=&ar=&mode=&format=avif&dpr=2)
A lisp implementation - Summary [Savannah]
Yet another implementation of Common Lisp.
How to win at CORS
A comprehensive introduction to CORS.
pylyzer: A fast static code analyzer & language server for Python
A Python language server written in Rust.
The Rise, Fall, and Surprising Survival of dBase
A history of dBase.
niquests - A requests fork
Requests but with HTTP/3, HTTP/2, Multiplexed Connections, System CAs, Certificate Revocation, DNS over HTTPS / TLS / QUIC or UDP, Async, DNSSEC, and (much) pain removed!