RippleEffect Gem Brings Static Change-Impact Analysis to Large Rails Apps

·1 views

A new open-source Ruby gem called RippleEffect aims to help developers understand what could break when modifying code in large Ruby on Rails applications. The tool performs static analysis locally without booting the app, connecting to a database, or calling external services, making it fully deterministic. It maps relationships across callbacks, associations, routes, background jobs, mailers, and tests to trace both direct and indirect dependencies of any given method. The gem uses an evidence-and-confidence model to avoid fabricating uncertain relationships, flagging ambiguity instead of guessing. It has already been tested against real-world codebases including Mastodon, RubyGems.org, and Solidus, and is available on GitHub and RubyGems.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Admin Menu Editor Pro Supply Chain Attack Backdoors 1,500 WordPress Sites

The official distribution infrastructure of the WordPress plugin Admin Menu Editor Pro was compromised, allowing attackers to embed malicious code into versions 2.35 and parts of 2.36 of the plugin. The tampered updates deployed a web shell via a rogue PHP file and created hidden administrator accounts on affected sites, impacting an estimated 1,500 WordPress installations across roughly 230 customers. The breach persisted even after the developer pulled version 2.35 and issued version 2.36, as the distribution server itself remained compromised at the time. Affected sites show signs of ongoing persistence including hidden users, rogue MU plugins, database modifications, and PHP files that may survive plugin deletion. The developer has advised removing both affected versions, auditing the wp_users table directly, and restoring from backups predating September 14, 2026.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Orange Pi's $75 AI Board Hits Shelves as NVIDIA's Rival Sits Unannounced Until 2027

In late August 2026, NVIDIA unveiled the Jetson Orin Nano 2 with 78 TOPS of AI compute, but the product has no listed price and will not ship until the first half of 2027. Just days later, Orange Pi began taking orders for the Orange Pi 5 Max, a Rockchip RK3588-based single-board computer starting at $75 on AliExpress and available immediately. The Orin Nano 2's predecessor, the Orin Nano 8GB, carries a 2022 MSRP of $299 but trades on the street for $369 to over $800 in 2026. The wide price gap is largely attributed to Rockchip's decades-long strategy of amortising chip R&D costs across massive consumer-electronics volumes, allowing the same silicon to be sold cheaply into new markets. Analysts note that direct TOPS comparisons across the two platforms are misleading, as each vendor measures AI performance using different methodologies and architectures.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Persistent Memory for AI Agents, Finds It Helps Him Too

A software developer created Mycelium, a persistent associative memory system originally designed to help AI agents retain context across sessions, model changes, and project restarts. The tool stores not just transcripts but decisions, dead ends, and the reasoning behind architectural choices, allowing agents to re-orient themselves without starting from scratch. Over time, the developer noticed the system was equally useful for himself, helping him resume complex personal projects after real-life interruptions without losing the mental state required to continue. He argues that many ambitious side projects fail not from lack of interest but because the cognitive cost of reconstruction becomes too high to overcome. The same insight is now informing a separate research experiment exploring whether learned states can exist and be transferred outside their original neural substrate, using fruit-fly neural circuitry as a model.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Tutorial: Building a Full MCP Client-Server Loop in Python With LLM Tool Choice

A DEV Community post, compiled and translated from a Chinese Cnblogs tutorial by 花酒锄作田, walks engineers through building a complete Model Context Protocol (MCP) loop in Python 3.11+. Unlike most MCP guides that only cover server registration in tools like Cursor, this tutorial also constructs the client and host side, covering prompt listing, resource reading, and tool invocation. The workflow progresses from a stdio-based transport to streamable HTTP, and finally integrates an LLM to autonomously select which tool to call. The author emphasizes writing precise type hints and docstrings, as these directly become the tool descriptions exposed to the model. The guide targets backend engineers shipping agents who need a reliable discover-bind-call-feedback loop before choosing a model.

0 comments Read more at DEV Community