SShortSingh.

Programming

0
ProgrammingDEV Community ·

Jev gateway does not cut Claude Code costs, its own benchmark confirms

A developer who examined the jev-gateway source code found that the tool can only operate in 'hint' mode inside Claude Code, meaning it suggests a tool to the model rather than forcing a selection. This limitation exists because Anthropic's API returns errors when tools are forced alongside extended thinking, and changing tool_choice invalidates the message cache. The gateway's own README acknowledges the constraint, stating users should expect better tool picks on large tool lists, not lower cost or latency. The published benchmark of 120 sessions shows mixed results: routing reduced token use on one task but increased input tokens by up to 61% and time by 83% on another, with one model also solving a task less reliably when routing was enabled. The viral videos promoting the tool as the cheapest agentic coding loop did not mention these trade-offs or quote the README's own disclaimer.

0
ProgrammingHacker News ·

Meta Blocks Brazil President Lula's Facebook Page and Campaign Ads Before Election

Meta has blocked Brazilian President Luiz Inácio Lula da Silva's Facebook page along with his campaign advertisements. The action comes approximately two weeks before a scheduled election in Brazil. The blocking affects Lula's ability to reach voters through one of the country's most widely used social media platforms. The move has drawn attention given the timing and the political significance of restricting a sitting president's digital campaign presence. No detailed official explanation from Meta regarding the specific reasons for the block has been widely reported.

0
ProgrammingDEV Community ·

Developer shares structured workflow for building and releasing open source projects

A software developer has outlined a practical, step-by-step approach to taking coding ideas from concept to publicly released open source projects. The workflow prioritises identifying a real problem before choosing a technology, then progresses through requirements, a minimal working version, testing, and documentation before any release. The developer emphasises that good documentation — including a clear README, CONTRIBUTING, and CHANGELOG files — is as important as the code itself for attracting contributors. Automated testing and descriptive Git commit messages are highlighted as key habits that keep projects maintainable over time. The post argues that publishing code and iterating based on real-world feedback provides learning that tutorials alone cannot replicate.

0
ProgrammingDEV Community ·

Developer Builds Clash of Clans War Outcome Simulator Using Official Game API

A developer discovered the Clash of Clans public API and used it to build a war simulation tool called WarOracle. The tool analyzes a clan's current war data, including player Town Hall levels, heroes, equipment, and past attack history, to estimate how individual attacks might perform. It then runs Monte Carlo simulations across remaining war attacks to produce win, loss, or draw probabilities along with projected star counts and score ranges. For ongoing wars, already-completed attacks are treated as fixed outcomes, with only the remaining attacks being simulated. The backend is built with Spring Boot and Java, while the frontend uses React, and the developer is still evaluating whether the tool offers genuine value to active Clash of Clans players.

0
ProgrammingDEV Community ·

Independent Benchmark Pits TypeSafe's Jev Model Against GPT-4, Claude, and Gemini

A developer has published an independent benchmark evaluating TypeSafe's Jev model against leading large language models including GPT-4, Claude, and Gemini. Unlike conventional LLMs, Jev outputs probabilities for predefined answer choices rather than generating free-form text. The benchmark focused on classification tasks such as spam detection, sentiment analysis, and topic classification. The tests were designed with reproducibility in mind, with full code made available via a public GitHub repository. Jev's probability-based approach is seen as potentially useful for intent routing, safety guardrails, and low-latency classification pipelines in AI systems.

0
ProgrammingDEV Community ·

Why micro frontend contracts matter more than bundler config

A development team building a React-based government events platform adopted Module Federation to allow independent deployments across multiple teams, replacing a monolithic release process that forced everyone to wait on the slowest team. The core challenge they identified was not the bundler setup, which can be configured in hours, but defining and enforcing explicit contracts between the shell and remote modules. Each remote was required to declare its exposed props, emitted events, and shared dependency version ranges, with the shell refusing to mount any remote that fell outside the agreed range. This approach moved failures to load time rather than production, eliminated release-train coordination, and reduced the overall release cycle by roughly 40 percent. The team concluded that splitting frontends by team ownership, keeping shared dependencies minimal, and writing the contract before touching build config are the critical factors for sustainable micro frontend architecture.

0
ProgrammingDEV Community ·

Code Reviews Still Matter in the AI Era, But the Process Needs Rethinking

As coding agents grow capable of writing, testing, and refactoring entire features autonomously, the traditional assumption that a human engineer authored the code is increasingly unreliable. A software engineer writing on DEV Community argues that code review remains essential — arguably more so — but that its underlying purpose must be reexamined. The conventional model, where one engineer writes code and another reviews it before merging, was designed to catch bugs, question design decisions, and build shared team ownership. In an agentic workflow, the engineer opening a pull request may have spent their time directing and reviewing an AI agent rather than writing code directly, raising questions about what a second human review actually adds. The author contends that approval counts can become a hollow proxy for quality, and that the meaningful act of verification is the engineer genuinely understanding and taking ownership of the change — regardless of whether a human or an AI produced it.

0
ProgrammingDEV Community ·

Why AI Agents Excel at Starting Software But Struggle to Finish It

AI coding agents can rapidly generate the first 80% of a software project, but completing the final stretch remains a largely unsolved challenge for developers. The bottleneck has shifted from building code to hardening it — handling edge cases, integration issues, and failure modes that require careful human judgment. At KandiForge, developer and author experienced this firsthand when agents produced millions of lines of code across 20 repositories, yet finishing the work proved unmanageable at that scale. Adding more reviewers and testers helped only partially, as tests were typically written after code was already integrated, meaning problems were caught too late. The author is documenting ongoing experiments to address this 'last mile' problem in a forthcoming series, ahead of a talk at the BuildStuff conference in Vilnius in December.

0
ProgrammingDEV Community ·

How Gemini in Android Studio Can Safely Modernize Legacy Kotlin Codebases

Android developers maintaining legacy codebases that rely on RxJava and XML layouts face a time-consuming and error-prone modernization challenge. Google's Gemini AI assistant, integrated into Android Studio, offers a practical way to accelerate migration to Jetpack Compose and Kotlin Coroutines. Experts warn against dumping entire files into AI prompts, as this often produces broken lifecycle handling or lost business logic. A more reliable approach follows a staged pipeline: first converting RxJava streams to Coroutines and Flow, then extracting UI state, migrating XML layouts to Compose, and finally generating comparative unit tests. This structured, human-reviewed workflow allows teams to leverage AI assistance without compromising app stability or code quality.

0
ProgrammingDEV Community ·

Over 6,000 VeloCloud Orchestrators Exposed Online Amid Actively Exploited CVE-2026-93952

CVE-2026-93952 is a maximum-severity (CVSS 10.0) vulnerability affecting on-premises VeloCloud Orchestrator (VCO), which Arista Networks has confirmed is actively being exploited in the wild. Internet scanning data from ZoomEye, queried on September 22, 2026, identified approximately 6,050 internet-reachable systems returning VeloCloud-related HTTP content, indicating significant public exposure of what should be a tightly restricted management plane. The figure reflects reachable systems bearing the VeloCloud fingerprint, not a confirmed count of vulnerable builds, as version ranges and deployment models cannot be determined from fingerprinting alone. Affected versions include VCO 5.2.3.15 and earlier, 6.1.3.7 and below, 6.4.2.7 and below, and 7.0.0.2 and below, while cloud-hosted instances were patched automatically and are not at risk. Administrators are advised to upgrade to a fixed build, restrict the VCO web interface to trusted internal networks, and audit systems for indicators of compromise such as the vcnode.js backdoor script.

0
ProgrammingDEV Community ·

Developer launches Kairo app to privately preserve memories with close ones

A developer has built and released Kairo, an Android app designed to help users capture and revisit small, everyday moments spent with people they care about. Users connect by exchanging Kairo codes, and the app can automatically detect when two connected people meet. After a meetup, users can add photos or notes, which accumulate into a private timeline and memory book for each relationship. The app is now available on Google Play, with the developer still refining the timeline experience. The goal is to make remembering meaningful moments easier without reducing personal connections to data tracking.

0
ProgrammingDEV Community ·

Colin Furze's Magnet-Only Bike Suspension Works on Small Bumps, Fails on Big Ones

British inventor Colin Furze built a bicycle suspension system using opposing neodymium magnets — each rated at 500 kg — to replace traditional springs and dampers entirely. The repelling magnetic fields absorb small bumps smoothly, returning energy much like a conventional coil spring would. However, without a hydraulic damper to dissipate energy as heat, any significant bump causes uncontrolled, repeated bouncing, effectively turning the bike into a pogo stick. This happens because magnetic fields cannot bleed off kinetic energy through friction or fluid resistance the way a damper does. Engineers have noted that adding a separate damping mechanism alongside the magnets could make such a system viable, as rare-earth magnet springs are already used in industrial vibration isolation when paired with dampers.

0
ProgrammingDEV Community ·

Developer shares three hard-won lessons building a 25-source forestry news aggregator

A developer building a forestry news aggregator covering 25 sources encountered three significant technical and cost challenges during development. Google News RSS feeds return obfuscated shell URLs that require scraping hidden page attributes and calling an undocumented internal Google endpoint to resolve the actual publisher links. Even after resolving URLs, roughly one-third of articles still lacked summaries because many publishers block subsequent content fetches. Netlify's deploy-credit pricing model meant that triggering a site rebuild each time new data arrived would consume nearly half the monthly credit budget. The developer resolved the cost issue by decoupling data collection from site deployment, using a client-side API call to refresh headlines dynamically without triggering a full rebuild.

0
ProgrammingDEV Community ·

WClickHouse Library Loads 100,000-Row Pandas DataFrames into ClickHouse in Under 0.6s

A Python library called WClickHouse has introduced an insert_dataframe() method designed to load Pandas DataFrames into ClickHouse analytical databases at near-network speed, eliminating the need for slow row-by-row iteration. The tool addresses common pain points for data scientists, including type incompatibilities between Pandas float64/NaN values and ClickHouse's nullable types, as well as Jupyter Notebook crashes when exporting large datasets. According to the developers, the method can ingest 100,000 rows in under 0.6 seconds using a vectorized backend built on Apache Arrow and Pydantic v2. The library supports Python versions 3.9 through 3.14 and claims over 95% test coverage against real ClickHouse instances. WClickHouse is available on both GitHub and PyPI as an open-source project.

0
ProgrammingDEV Community ·

WClickHouse Library Inserts 100K Pandas Rows into ClickHouse in Under 0.6 Seconds

An open-source Python library called WClickHouse offers a method called insert_dataframe() that loads Pandas DataFrames directly into ClickHouse databases using a vectorized backend. The tool addresses common pain points for data scientists, including slow row-by-row insertion methods like df.iterrows() that can take up to 20 minutes and type mismatches between Pandas and ClickHouse data types. The library automatically aligns Pandas dtypes with ClickHouse table schemas, eliminating manual conversion steps. It supports Python versions 3.9 through 3.14 and is built on Apache Arrow and Pydantic v2, with over 95% test coverage verified against live ClickHouse servers. WClickHouse is available on both GitHub and PyPI as part of an ongoing open-source engineering series.

0
ProgrammingDEV Community ·

wFabricSecurity Brings Cryptographic Microsegmentation to Blockchain Nodes

An open-source tool called wFabricSecurity introduces cryptographic microsegmentation for Hyperledger Fabric blockchain networks, enforcing explicit communication permissions between nodes. The library applies a default-deny policy, meaning all inter-node communication is blocked unless specifically authorized. Permissions are managed through a Common Name (CN) based matrix, supporting both unidirectional and bidirectional communication rules. The tool is designed to prevent threats such as unauthorized lateral movement and compromised worker nodes issuing malicious commands to orchestrators. Compatible with Python 3.10 and above, it also includes code integrity hashing and token-bucket rate limiting.

0
ProgrammingDEV Community ·

wFabricSecurity enforces cryptographic micro-segmentation for blockchain nodes

An open-source library called wFabricSecurity introduces cryptographic micro-segmentation to control communication between blockchain nodes in Hyperledger Fabric environments. The tool operates on a default-deny policy, meaning all inter-node communication is blocked unless explicitly permitted by the administrator. Permissions are registered using cryptographic Common Names, and the system supports both unidirectional and bidirectional communication rules. This approach addresses risks such as unauthorized lateral movement and compromised nodes sending malicious commands to orchestrators. The library is compatible with Python 3.10 and above, and is available on both GitHub and PyPI.

0
ProgrammingDEV Community ·

wconnect Library Offers Type-Safe WMessage Model for Telegram Bot Development

The wconnect Python library introduces a WMessage domain abstraction designed to simplify Telegram Bot API event handling. Instead of manually parsing nested dictionaries, developers can access structured message data such as user ID, chat ID, and message text through typed attributes. The library supports multiple event types via decorators like on_message and on_command, and includes a non-blocking daemon poller through run_consumers(). It also enables direct binary file streaming from RAM using a WFile object. The project is open source and available on GitHub for developers building Telegram bots.

0
ProgrammingDEV Community ·

wauth Library Unifies Docker Secret Loading for Dev and Production Environments

Developers often face friction when writing separate secret-management code for local development and production Docker Swarm deployments. The open-source Python library wauth addresses this through its DriverFactory, which automatically detects the runtime environment and selects the appropriate driver. Inside a Docker container, it reads secrets from the secure in-memory path /run/secrets, while outside it falls back to an encrypted local SQLite vault. This eliminates common pitfalls such as hardcoded paths, secrets exposed via environment variables, and code that crashes when tested outside Docker. The library is publicly available on GitHub and can be installed via pip using the package name wauth.

0
ProgrammingDEV Community ·

wsqlite brings async/await SQLite support with connection pooling for FastAPI

Synchronous SQLite queries can block FastAPI's event loop, degrading web concurrency and performance. The wsqlite library addresses this by offering full async/await support along with a dedicated connection pool from the start. It allows developers to define database tables using standard Pydantic v2 models, with automatic column synchronization on startup and no manual migrations required. The library uses WAL mode by default, enabling over 5,000 inserts per second, and supports both synchronous and asynchronous operations. wsqlite is available as an open-source project on GitHub.

← NewerPage 875 of 3176Older →