SShortSingh.

Programming

0
ProgrammingDEV Community ·

An SBOM is a tool output, not a fact about your software

Two papers appeared on arXiv in September that describe, from opposite ends, a pipeline control I have shipped many times. The first, from Inria and ANSSI, ran three SBOM generators over the same 3,326 repositories and found that two of them miss more than half of the dependencies in JavaScript projects. The second ran 1,920 trials of AI coding assistants installing software and found that they opened an SBOM, signature or attestation before installing in 0.5% of trials and verified one in none. My position: an SBOM generated in CI is evidence about the tool you ran, at the version you ran it,

0
ProgrammingDEV Community ·

27 days of autonomous agents: nothing crashed, disk just hit 85%

I did not plan to write about a hard drive today. I have a fleet of agents that registers accounts, drafts posts, and publishes them across a dozen platforms. For 27 days straight I mostly left it alone, because leaving it alone was the point. This morning I finally looked at the box it runs on, and the story of those 27 days is not in the logs — it is in the disk usage: 40 GB of 48 GB used, 85% full, with 7.5 GB free and 1.6 GB of swap actively being used. The uncomfortable number is not the uptime.

0
ProgrammingDEV Community ·

I built a self-hosted AI agent for GitLab. It has reviewed 1,000+ merge requests.

Assign a GitLab issue to a bot, and a few minutes later there's a draft merge request with the fix. Open an MR, and the same bot reviews it before a human gets to it. That's langgraph-harness, a self-hosted agent platform for GitLab I've been building and running on real projects since June. What it does MR review. A webhook fires when an MR opens or changes.

0
ProgrammingDEV Community ·

OpenJDK Banned AI-Generated Code. Here Is Exactly What the Policy Allows

The story hit the Hacker News front page again this week: Oracle bans AI-generated code from OpenJDK. 536 points, 381 comments, and a comment section full of people arguing about a policy most of them had apparently not read. I have run AI coding agents as a core part of my daily workflow for a long time now, so my first reaction was the same as probably yours: a blanket ban? In 2026? For Java, the language running half the world's banks?

0
ProgrammingDEV Community ·

B2B Lead Research Without Getting Your Domain Blacklisted

A good lead list is not "1,000 emails". It is a small set of people who match your ideal Write three sentences: who exactly (role + company size + industry), what pain, what trigger now (funding, hiring, product launch, tech change). If you cannot Prefer primary sources. Company websites, careers pages, GitHub orgs, conference speaker lists. These are more accurate than scraped aggregators and less likely to contain traps.

0
ProgrammingDEV Community ·

Ninety: I vibe-coded a Schengen day accountant that admits when it doesn't know

This is a submission for the Sanity Challenge, Path Two: Vibe-Code Something Strange Live: https://web-eight-amber-6zft3r0kdf.vercel.app Code: https://github.com/PhiBao/beyond-vibe Sanity project: jvgi63fz · dataset production Ninety knows the exact day you went over. Every Schengen short-stay calculator tells you how many days you have used. None of them tell you which day you crossed the line, why that day counted, or what to change. Ninety does all three. It is a day accountant for the 90-in-any-180 rule.

0
ProgrammingDEV Community ·

Stop Using NavigationView - Mastering NavigationStack in 2026

If you are still wrapping your SwiftUI views in NavigationView in 2026, we need to talk. Apple soft-deprecated NavigationView years ago. While it might still "work" for simple prototypes, it is a nightmare for scalable, real-world applications. If you want to handle push notifications, deep links, or complex onboarding flows, you must use NavigationStack. In this guide, I’ll show you how to move from "Push-and-Pray" navigation to a robust, state-driven routing system.

0
ProgrammingDEV Community ·

Native iOS vs React Native vs Flutter: Which Should Your App Use?

I build native iOS apps, so take my bias into account. But I have also worked in web teams and across a product organization that shipped on several platforms, and the right answer is not always "native". Here is how I would decide if it were my money. Native (Swift / SwiftUI) React Native Flutter Best when iPhone is your main audience Your team already knows React You need iOS and Android with one custom UI Feel on iPhone Most native Close, with care Custom-drawn, consistent across platforms New Apple features Available immediately After libraries catch up After plugins catch up Android Separ

0
ProgrammingDEV Community ·

What is PPP pricing? Purchasing power parity for app subscriptions

PPP pricing (purchasing power parity pricing) means charging each country a price scaled to what things cost there, instead of converting one price at the exchange rate. A $4.99 subscription might become about $1.19 in India and $2.29 in Brazil. Exchange rates reflect trade and capital flows, not what a coffee or a phone plan costs. When Apple converts $4.99 into rupees, the result is roughly $4.99 at market rates. But the World Bank estimates that goods and services in India cost about 23% of US prices, so that subscription feels about 4.3× as expensive to someone living there.

0
ProgrammingDEV Community ·

Where a $4.99 subscription costs the most: App Store countries ranked by price level

Apple converts your subscription price at market exchange rates. We ranked 174 App Store territories by the World Bank price-level index to show where that makes a $4.99 subscription most expensive in local terms. 109 of 174 territories have a price level below half of the US level. 37 are below a third, where an exchange-rate-converted price feels more than three times as expensive as it does in the US. Only 6 are more expensive than the US: Israel, Barbados, Switzerland, Cayman Islands, Iceland, Bermuda.

0
ProgrammingDEV Community ·

PlateMate — Dietary Safety & Allergen Intelligence Powered by TabPFN

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend I built PlateMate, a dietary safety intelligence platform designed for my close friend and roommate, Alex. Alex lives with two life-altering dietary restrictions: Strict Celiac Disease: Ingesting even 20 parts per million of gluten (a microscopic crumb from a shared toaster or frying oil) triggers an autoimmune attack that damages their small intestine. Peanut Anaphylaxis: Exposure to trace peanut proteins or cross-contact causes acute airway constriction requiring an emergency EpiPen. Dining out or ordering takeo

0
ProgrammingDEV Community ·

How Much to Charge Clients for Travel Time

This article first appeared on Invoala. There isn't one universal number. The workable answer is that you charge travel time at your normal hourly rate whenever the trip is made specifically for one client and you can't do other paid work while you're in transit — and you use a reduced rate, commonly half, only for long stretches where you're just sitting in a seat. Your daily commute is not billable, and a trip you'd make anyway is not billable. Everything else comes down to a rate you choose in advance and write down before the job starts.

0
ProgrammingDEV Community ·

From Provisioned to Ready: Tracking Application Health in My Kubernetes Platform

In the previous posts, I built the first real platform flow: Application | v Platform Operator | +------ Deployment | +------ Service The platform could also handle updates. If I changed: spec: image: greeting-service:2.0.0 replicas: 3 port: containerPort: 9090 the existing Deployment and Service were reconciled to the new desired state. That worked well. But there was still one important problem. The platform could tell me: I created your Deployment.

← NewerPage 681 of 3154Older →