Munchable app ships unused developer data in production bundle

·1 views

The Munchable mobile app includes a developer-only catalogue of fake products and a menu for testing without a backend. Despite claims the data is compiled out for production, a 3.8 MB web bundle contains the sample products and menu. Analysis shows the code paths to access this data are removed, but the sample data modules themselves remain. This occurs because the build process eliminates dead code within modules but does not remove the unused modules from the bundle.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Toolbuilder Shares Key Non-Coding Challenges for Startups

A developer tool builder emphasizes that identifying a specific audience and their most painful problem is more critical than initial coding. They advise validating the core idea through prototypes or experiments before full development. The article stresses that product distribution and user discovery must begin early and are integral to building. Finally, it recommends starting with a deliberately narrow solution and measuring progress by user outcomes, not code volume.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Transforms Restaurant Menus Into Personalized, Informative Tools

Traditional print menus often lack detailed information on ingredients and nutrition, which can frustrate diners with dietary needs. AI-powered systems are now addressing this by analyzing menu content. Using technologies like natural language processing and computer vision, these systems extract ingredients and estimate nutritional values. This allows for personalized recommendations, helping customers make informed choices. The technology is reshaping the dining experience for both consumers and restaurant operators.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

MCP Cassette tool enables offline testing of AI agents by recording and replaying server sessions

The mcp-cassette tool records live Model Context Protocol server interactions into a JSONL file. This recording can then be replayed as a standalone MCP server for offline testing. The approach eliminates dependency on live servers, credentials, and network availability during testing. The tool also includes safety checks for potential security risks in tool contracts. It supports multiple testing frameworks and integrates with CI/CD pipelines.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Security experts advocate Least Privilege principle to limit app permissions

The Principle of Least Privilege advises granting users, applications, and services only the minimum permissions necessary to perform their specific tasks. This approach, aligned with NIST guidelines, is a security measure to limit potential damage if credentials are compromised. For example, a service generating sales reports should only have read access to relevant data, not permissions to update or delete records. Security best practices also require enforcing these permission checks at the backend API level, not just the user interface.

0 comments Read more at DEV Community