SShortSingh.

Programming

0
ProgrammingDEV Community ·

NestJS developers can add AI agents with new LangChain module

A new module integrates LangChain AI agents into the NestJS application framework. Developers can register the agent as a module, inject it as a provider, and expose it via a simple API endpoint. The agent is configured with a chosen AI model and a system prompt, and it returns the model's response along with operational details like token usage. This enables NestJS applications to incorporate AI functionality that can also be extended with custom tools for specific actions.

0
ProgrammingDEV Community ·

Non-developer shares AI coding guardrails after managing 1,156 AI-generated pull requests

A non-developer oversaw an AI coding project from February to October 2026, where Claude Code generated 3,215 commits and 1,156 merged pull requests for product SiteNeuro. The project revealed that pure chat-driven development becomes problematic as projects scale because the chat interface fails to retain decisions. To address this, the author implemented guardrails including mandatory specifications before coding, strict spending limits on AI tools, and a project constitution file the AI reads at every session. The platform has been live for two months and has generated over 1,000 websites using this structured approach.

0
ProgrammingDEV Community ·

PhishBrief AI tool offers local phishing analysis for small teams

A developer has created PhishBrief AI, an open-source tool designed to help small teams analyze suspicious emails for phishing indicators. The application runs open-weight AI models locally using Ollama and Streamlit, avoiding the need to send sensitive content to third-party APIs. It aims to serve small businesses, freelancers, students, and IT support teams lacking dedicated security staff. The tool provides risk explanations and actionable recommendations while emphasizing it is an assistive tool, not a detection guarantee. The developer is seeking early testers to evaluate the tool's usefulness and understandability.

0
ProgrammingDEV Community ·

AI Coding Tools Multiply Workload, Introduce New Security and Quality Risks

Experts warn that AI-assisted coding has not reduced but instead multiplied developer workloads by enabling faster feature creation. This increased output speed, often from less experienced developers, can outpace proper code review, leading to flawed but professional-looking logic. A primary concern is the mishandling of sensitive data, as AI agents may inadvertently expose secrets like API keys or passwords through logs or generated files. The article also cautions against granting AI tools overly broad permissions, advising the use of narrowly defined tools to prevent unintended data access. Additionally, developers are urged to rigorously validate all AI-generated code and dependencies, treating its output as untrusted input.

0
ProgrammingDEV Community ·

Developer builds in-browser text case conversion tool for local processing

A developer has created a lightweight tool that converts text casing entirely within a web browser. The tool handles uppercase, lowercase, sentence case, title case, and toggle case transformations using JavaScript. It processes text locally, ensuring no data is sent over a network, which protects user privacy. The algorithm's time complexity scales linearly with the length of the input text. The implementation was shared in a tutorial on the DEV Community platform.

0
ProgrammingDEV Community ·

TypeScript type checks miss browser compatibility, causing runtime crashes

A developer reported in February 2024 that using `replaceAll` in a Next.js app caused crashes on older browsers, despite TypeScript's type checker finding no issue. A similar problem occurred with Mermaid diagrams in May 2024 when using features like `structuredClone` on older Safari versions. The root cause is that TypeScript's standard type definitions assume modern browser features are present. A solution involves setting up a separate type-checking configuration using tools like `typescript-baseline-lib` to validate code against a specific browser support target. This creates an additional check in CI pipelines to catch compatibility issues before code is deployed.

0
ProgrammingHacker News ·

Apple launches Safari promotion highlighting privacy and performance benefits over Chrome

Apple has initiated a promotional campaign advocating for users to switch from Chrome to Safari. The campaign, launched this week, outlines what Apple claims are Safari's superior privacy protections and performance efficiency. This move is part of Apple's broader effort to promote its own software ecosystem. The campaign details are being discussed within the tech community, including on forums like Hacker News.

0
ProgrammingHacker News ·

Kyle Kukshtel details engineering an AI harness for game development

Developer Kyle Kukshtel has published an article explaining the engineering of an AI harness for game development. The article, posted on his personal website, focuses on the technical implementation of this tool. It specifically details using Claude Code within the harness to assist the development process. The piece was shared on Hacker News, where it garnered community discussion.

0
ProgrammingDEV Community ·

Claude 5's 1M context window changes prompting strategies for Python developers

A developer shares insights from six months of using Claude 5 with its 1 million token context window for Python development. The key change is the ability to submit entire codebases for analysis instead of slicing code into smaller chunks. This enables more complex queries, such as tracing data flows across multiple files or identifying all call sites for a function. Developers must craft specific, structured prompts to receive actionable output rather than general summaries. The model's capacity shifts the focus from fitting code to designing effective prompts for practical code review and refactoring tasks.

0
ProgrammingHacker News ·

Blog Post Highlights a Pill Splitter Its Author Calls the Best Available

A post on the bookofjoe blog names a pill splitter as the author's favorite item and describes it as the world's best. The piece was published on the blog in September 2026 and is linked from a Hacker News discussion. The discussion thread has drawn 6 points and 1 comment at the time of listing. The source material provides little beyond the headline, so details about the product's design or features cannot be confirmed from it.

0
ProgrammingDEV Community ·

Developer compares LLM evaluation tools, finds rubric design more critical than tool choice

A developer tested two AI evaluation frameworks, promptfoo and DeepEval, on 40 customer service replies. They concluded that carefully defining scoring criteria matters more than which framework is used. The developer created a personal tool to catch errors in rubric design, such as incorrect weight sums. The test showed explicit scoring anchors reduced inconsistent judgments more than any framework setting.

0
ProgrammingDEV Community ·

New Inference Engine Unifies 15 Sparse Attention Methods for Long-Context LLMs

Researchers have published SparseEngine, an open-source inference engine designed to make long-context AI models more efficient. It does this by abstracting the key-value cache, allowing 15 different sparse attention methods to be integrated under a single framework. The system, released under an Apache 2.0 license, can significantly improve decoding speed compared to standard engines in certain long-context scenarios. However, the paper notes that the largest speed improvements often come with a trade-off in accuracy.

0
ProgrammingDEV Community ·

Proving a timestamped hash requires producing the exact original bytes

The article questions whether developers can reproduce the exact bytes of a software release used in a timestamped hash. It demonstrates that even a rebuild from the same commit can produce different archive files due to metadata like timestamps and file order. Using deterministic build tools and specific flags can help pin these variables and achieve byte-for-byte reproducibility. The author concludes that ensuring a full pipeline reproduces identical bytes is significant work, suggesting an alternative is to timestamp a manifest of the archive's contents instead.

0
ProgrammingDEV Community ·

Study finds language style less crucial than format instructions for small LLMs

A recent test evaluated how eight local language models, ranging from 0.6B to 14B parameters, performed on 50 tasks across three language styles: plain, normal, and ornate. The results showed that for models of 4B parameters or fewer, normal language prompts yielded the best performance, with both simpler and more ornate phrasing causing a slight drop in accuracy. For larger models, the language style made little difference to the outcome. The key factor influencing accuracy was the presence of a clear, explicit instruction line specifying how the model should format its answer.

0
ProgrammingDEV Community ·

Fine-tuned AI model matches original on ranking but misses key job roles

A developer attempted to replace a costly AI job-filtering system with a fine-tuned local model. The fine-tuned model matched the original's ranking accuracy and significantly reduced false alarms. However, it failed to identify as many of the most promising 'strong' job roles, finding only 6 compared to the original's 10 out of 14. Due to this critical shortcoming, the original model remains in production, as missing a strong role is considered a more significant failure.

0
ProgrammingDEV Community ·

Multi-tenant SaaS data leak exposes flaw in relying on query conventions for isolation

The Bicitra education management system encountered a data leak where one school's information was accessible through seven endpoints. This occurred despite using a Prisma Client Extension to automatically inject tenant-scoping clauses into database queries. A nested 'include' relation bypassed this automated scoping mechanism. The developers implemented a structural fix by creating a central registry of tenant-scoped foreign keys, validated at write time, to protect new endpoints by default.

0
ProgrammingDEV Community ·

Supabase clarifies common RLS policy error 42501 and solutions.

A developer on DEV Community detailed the specific '42501' error in Supabase, which indicates an insufficient privilege violation. The error commonly occurs when a new database row conflicts with existing Row-Level Security (RLS) policies. The article explains that this can happen during insert or upsert operations if the correct policies for the specific operation are not defined. It provides tested solutions, such as creating appropriate INSERT or SELECT policies tailored to the user's authentication status. The guide is based on tests using Supabase's local development stack with specific library versions.

0
ProgrammingDEV Community ·

Automating multi-format PDF data extraction requires more than simple converters

Extracting structured data from hundreds of PDFs into Excel requires a multi-step pipeline, not just a converter tool. The process must first classify documents by format, as files may contain selectable text, scanned images, or mixed layouts. Optical Character Recognition quality depends on factors like contrast and layout complexity, according to the French National Library. Each extracted data point must remain traceable to its source document and page for verification. The approach involves routing documents appropriately, normalizing data, applying business rules, and flagging ambiguous cases for human review.

← NewerPage 458 of 3111Older →