SShortSingh.
0
ProgrammingDEV Community ·

Developer releases HTMLPlus Element v4, a compiler that automates web component boilerplate

A developer has publicly unveiled HTMLPlus Element v4 after several years of intermittent work and over 500 commits, describing it as a compiler that eliminates repetitive boilerplate when writing native web custom elements. The tool uses TypeScript decorators to automatically derive tag names from class names, resolve property types, pick up co-located CSS files, and generate TypeScript definitions at build time. Output components work across major frameworks — including React, Vue, Angular, Svelte, and Solid — without wrapper packages, by emitting events under each framework's expected naming convention. The runtime weighs approximately 8 KB gzipped per element and under 11 KB for the full library, and the project is already used to power the htmlplus.io UI kit. Currently available as a Vite and Rollup plugin via unplugin, the project is MIT-licensed and open to public feedback on its API design.

0
ProgrammingDEV Community ·

TruffleHog, Gitleaks, GitHub Secret Scanning: How the Top CI Tools Compare in 2026

Hardcoded credentials remain a critical security risk, with exposed API keys and tokens often detected by malicious bots within minutes of being pushed to a repository. Engineering teams commonly integrate secret scanning tools into CI/CD pipelines, but widespread use has revealed a significant alert fatigue problem caused by false positives from test fixtures and expired tokens. A 2026 comparison of three leading tools — Gitleaks, TruffleHog, and GitHub Secret Scanning — highlights distinct trade-offs across regex detection, entropy analysis, and live API verification methods. Gitleaks is praised for speed and custom rule support but lacks live key validation, while TruffleHog offers over 750 detectors with active verification at the cost of slower CI performance. GitHub Secret Scanning is seamlessly integrated for public repos but requires a paid enterprise license for private repository coverage.

0
ProgrammingDEV Community ·

Tool Automates Weekly PostgreSQL Restore Testing via GitHub Actions

A tool called Revenant has been built to automate database restore validation, addressing the common problem of teams skipping or delaying restore drills. It uses a simple YAML configuration file and a GitHub Action to run weekly checks verifying that a PostgreSQL database can actually be recovered. The checks cover connection health, schema integrity, row counts, foreign key relationships, and data freshness. For AWS RDS users, Revenant can also restore an actual snapshot into a temporary sandbox, validate it, record recovery time, and automatically tear it down. The goal is to surface restore failures with specific, actionable error details before they become a crisis.

0
ProgrammingDEV Community ·

Developer Builds AI Agent That Accepts USDC Micropayments via HTTP 402 Protocol

A developer has shared a technical walkthrough detailing how to build an autonomous AI agent that charges callers small USDC micropayments before returning data, using the x402 HTTP Payment Required extension on the Base blockchain. The agent exposes a simple HTTP endpoint — in this case an ETH/USDC price aggregator — and requires a signed USDC transfer from the caller before fulfilling each request. The setup runs on lightweight infrastructure such as Cloudflare Workers or a basic Flask app on a low-cost VPS, keeping operating costs minimal. Earnings per call are fractions of a cent, and the author cautions that the system demands constant uptime, payment failure handling, and secure key management. The post is framed as a practical experiment for developers rather than a reliable passive income strategy.

0
ProgrammingDEV Community ·

RepoRoad Turns GitHub Repos into a Lofi Virtual Drive Streamed on YouTube

RepoRoad is a browser-based virtual world that visualises GitHub repositories as roadside buildings in a lofi-styled, voxel-rendered drive, streamed live to YouTube. Each building's height corresponds to a repository's star count, and its sign shows the project name and owner's avatar. Developers can add their own projects to the scene by placing a .reporoad.yml configuration file in their public repository. Viewers watching the stream can interact by queuing chickens to cross the road every five minutes. The project was built using TypeScript, React, Three.js, and React Three Fiber, with infrastructure running on Cloudflare Workers and D1 for shared state management.

0
ProgrammingDEV Community ·

How FHIR R4 Graph Structure Shapes ML Pipeline Design for Patient Records

A machine learning engineer building a retrieval-augmented generation system over FHIR R4 patient records found that understanding the data's graph structure — not just retrieval mechanics — was the core design challenge. FHIR records are structured as Bundles containing independent, cross-referencing resource objects rather than narrative documents, meaning standard document-chunking approaches can produce technically functional but clinically incorrect results. Of FHIR R4's 140-plus resource types, roughly ten — including Condition, Observation, MedicationRequest, and Encounter — account for the vast majority of clinically relevant question-answering. In a 78-patient synthetic corpus, Observations outnumbered Conditions by more than 15 to 1, creating a retrieval bias toward lab values that requires deliberate mitigation. A key structural detail engineers must internalize is the CodeableConcept, where clinical codes are arrays that may reference multiple terminology systems simultaneously, making assumptions like always taking the first coding entry unreliable.

0
ProgrammingDEV Community ·

Open-source tool Revenant automates PostgreSQL backup restore validation in CI and AWS

A developer built Revenant after observing that teams often confirm backups completed but never verify the restored database actually works. The open-source CLI tool lets teams define custom validation rules in a YAML file, checking for table existence, row counts, foreign key integrity, and data freshness. Users run a single command that produces a structured report confirming whether the restored database is genuinely usable. Revenant integrates with GitHub Actions for CI pipelines and can also spin up a temporary AWS RDS sandbox, validate a restored snapshot, and tear it down automatically. The tool is database-engine agnostic at the application layer, requiring only a PostgreSQL connection string regardless of the app's programming language.

0
ProgrammingDEV Community ·

Axem Open-Sources Shaide AI Platform Under Apache 2.0 for Air-Gapped Deployments

Axem has released the core of its Shaide AI platform as open-source software under the Apache 2.0 licence, targeting defence, aerospace, and other regulated organisations that cannot use cloud-based AI tools. The company built Shaide to enable on-premises AI deployment in air-gapped or data-restricted environments where sending information to external servers is prohibited. By open-sourcing the core, Axem aims to give organisations full auditability and control, so they remain independent of any single vendor's pricing changes, acquisitions, or shutdowns. The Community edition includes self-hosted deployment, a core orchestration engine, and the base feature set available free indefinitely, while enterprise features such as advanced user management and specialised coding agents remain part of a paid commercial offering. Axem says the open-source release is also intended to give developers inside regulated organisations a production-grade starting point rather than requiring them to build compliance and deployment tooling from scratch.

0
ProgrammingDEV Community ·

Finished web scraper sat unmerged on a git branch for 19 days, team discovers

A software team found a fully completed Vinted scraper stranded on an unmerged git branch for 19 days after their automated build pipeline logged agent-reported success without verifying the code had actually reached the main branch. The scraper was only discovered by accident when an unrelated query revealed 97 accumulated worktree branches, prompting a sweep that flagged the orphaned code. When the team finally ran it against the live site, it passed all 73 tests and completed a real cloud run for just $0.00105, with no residential proxies required — contradicting a standing internal note that marked Vinted as infeasible due to DataDome protection. The team noted the 'infeasible' label had been added without ever conducting an actual cloud-level test against the site. They identified two systemic fixes: distinguishing between 'agent reported success' and 'code shipped to main', and ensuring that any no-go decision explicitly documents every proxy tier that was actually tested.

0
ProgrammingDEV Community ·

Developer Builds AI-Powered Slack Bot to Deliver Daily Sustainability News Digests

A volunteer on the communications team at GreenHomeNYC, a New York-based sustainability nonprofit, built a Slack bot to revive the organization's underused news-sharing channel. The bot automatically fetches the latest sustainability articles via the GNews API, uses Google's Gemini AI to generate concise summaries, and posts a daily digest to a Slack channel through an incoming webhook. The project was built in a single overnight session starting Sunday at 6 PM EDT, with the final submission made just before a 3 AM deadline. It is built with TypeScript and Node.js, and uses GitHub Actions to run on a scheduled cron job. The developer submitted the project under the Best Use of Google AI category as part of DEV Community's Weekend Generosity Challenge.

0
IndiaNDTV ·

Somali Pirate Attacks Triple in 2026 With 15 Incidents Reported So Far

Piracy off the Somali coast has surged sharply in 2026, with at least 15 ship attacks recorded compared to only five in all of 2025. The significant rise marks a troubling resurgence of maritime threats in the region. The waters near Somalia have historically been a hotspot for piracy, particularly affecting international shipping lanes. Authorities and maritime organizations are monitoring the situation closely as the spike raises fresh security concerns for vessels transiting the area.

0
ProgrammingDEV Community ·

Developer Builds AI Tool to Scan NPM and PyPI Daily for Malicious Packages

A developer has launched Authtics Advisories, an open-source system that uses Google's Gemini AI to automatically scan package registries for potentially malicious code. Each day, the tool selects 100 packages from both NPM and PyPI, runs them through an AI analysis pipeline, and generates a report submitted as a GitHub pull request for human review. The developer emphasized that AI findings are not treated as confirmed verdicts — a human reviewer retains final authority before any security advisory is issued. NPM and PyPI scans are staggered roughly two hours apart, with each full scan taking between 30 minutes and an hour to complete. The developer plans to expand coverage to additional registries and is also working on a companion tool called Authtics NPM, which would warn users of potential risks at the point of package installation.

0
IndiaNDTV ·

Shiv Sena Workers Assault Hospital Staff Over Bill at Palghar ICU

A hospital employee at Relief Hospital in Palghar was slapped during a dispute over a medical bill in the early hours of Saturday. The confrontation reportedly involved around 30 Shiv Sena workers who entered the ICU. The workers had accompanied 'govindas' — participants injured during a Dahi Handi celebration — who were brought in for treatment. The Dahi Handi event had been held outside the Shiv Sena central office in Palghar. The incident has raised serious concerns about the safety of healthcare staff in the facility.

0
IndiaTimes of India ·

Air India Express Kochi-Abu Dhabi flight diverts back after mid-air engine oil drop

An Air India Express Boeing 737 flying from Kochi to Abu Dhabi was forced to turn back after a sudden drop in engine oil quantity was detected mid-flight. The crew identified the issue while the aircraft was cruising at 36,000 feet. As oil pressure fell to critically low levels, pilots shut down the affected engine as a precautionary measure. The flight subsequently returned and landed safely at Cochin International Airport with no reported injuries or damage.

0
IndiaTimes of India ·

Virat Kohli and Anushka Sharma Build Rs 1,300 Crore Business Empire

Indian cricket star Virat Kohli and actor Anushka Sharma have together accumulated a net worth exceeding Rs 1,300 crore through diversified business ventures. Kohli has invested across fashion, hospitality, and technology startups, while Sharma has established a presence in fashion and film production. Both have also made strategic financial investments that have bolstered their individual portfolios. The couple's luxury real estate holdings form a significant portion of their combined wealth.

0
IndiaTimes of India ·

McDonald's India Intern Allegedly Posts Unpaid Salary Complaint on Brand's Own Account

A controversy has erupted involving McDonald's India after a post allegedly made by an intern on the company's official social media account claimed unpaid wages. The incident has drawn widespread attention online, spotlighting workplace grievances among young employees. It has reignited broader discussions about Gen Z workers challenging traditional workplace norms and demanding accountability from employers. The episode reflects a growing trend of younger employees refusing to stay silent about perceived workplace injustices.

← NewerPage 843 of 4611Older →