Developer releases zero-dependency CLI tool to detect OpenAPI spec and code drift

·18 views

A developer has released oas-drift, an open-source command-line tool that identifies mismatches between an OpenAPI specification and a Python codebase. The tool detects three types of drift: routes defined in the spec but missing from code, routes in code not listed in the spec, and paths where the HTTP method differs between the two. Built using only Python 3.11's standard library with no external dependencies, it parses source files using Python's ast module without executing any code, ensuring fully deterministic output. Unlike many CI-facing tools, oas-drift exits with code 0 regardless of findings, leaving the decision to fail a build to the development team's own policy. The tool supports JSON output for machine-readable reports, making it easy to integrate into CI pipelines alongside filtering tools like jq.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Migrates 90 Cypress Tests to Playwright in 4 Days Using Claude AI

A developer successfully migrated a 90-spec Cypress end-to-end test suite to Playwright in just four working days using the AI coding assistant Claude Code. The suite had been built over three years by six contributors and included a 600-line custom helpers file, with the team originally estimating the migration would take two to three sprints. The approach involved manually translating one spec first to identify conversion patterns, then codifying those findings into a structured rulebook called MIGRATION_RULES.md before letting the AI handle the remaining 89 specs. Claude Code processed the tests in batches of five, following strict rules such as never inlining custom commands and running each migrated spec three times to confirm stability. A screenshot-diff gate was also used to catch any silent behavioral changes introduced during the automated conversion process.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Open-Sources Lightweight Biometric Auth Library for React Native on Android

A developer named Vijesh Kumar has released an open-source Android biometric authentication library for React Native called @vijeshkr/react-native-biometric-auth. The library is built entirely with Kotlin and uses AndroidX BiometricPrompt APIs, replacing older Java-based implementations. It supports fingerprint authentication with optional fallback to device credentials such as PIN, pattern, or password. The library offers a promise-based JavaScript and TypeScript API, requiring minimal configuration for integration into React Native projects. It was created to address gaps the developer encountered in existing biometric authentication solutions while building a secure mobile application.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Cloud, Local, or Self-Hosted: Three Ways AI Models Receive and Process Your Messages

When a user sends a message to an AI chatbot like ChatGPT or Gemini, the text travels over the internet to a remote server where a large language model processes it and returns a response. Developers building AI applications replicate this same request-response pattern in code rather than through a chat interface. AI models can be deployed in three ways: cloud-hosted services such as Gemini, GPT, and Claude, which charge per token and require an API key; locally on a personal machine using tools like Ollama, which is free but limited by hardware; or on privately controlled servers for organizations with strict data privacy needs. Cloud models offer superior performance and are always up to date, while local models trade capability for cost savings, privacy, and offline access. An API key acts as an authentication credential, included with every cloud request to verify the user's identity and authorize model usage.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Seven DNS Monitoring False Alarms and How to Engineer Them Out

Building a reliable DNS change monitor is deceptively complex, as DNS answers vary in ways that trigger false alerts even when nothing meaningful has changed. Common pitfalls include querying recursive resolvers with stale caches instead of authoritative nameservers, and treating rotated multi-value record order as a real change. TTL countdown values and SOA serial number bumps must also be excluded from comparisons to avoid noise from routine provider behaviour. Network timeouts and SERVFAIL responses need to be handled separately from genuine record deletions, so transient failures do not generate false removal alerts. Addressing each of these issues systematically can save developers significant debugging time when building their own DNS monitoring scripts.

0 comments Read more at DEV Community