Frontend Feeds

Today

Front-end, in one read.

The latest from the sources worth following, newest first.

  • David BushellMore Front-end Bloggers8 min read

    Danse Macabre

    My recent detour into Japanese detective fiction and the captivating mysteries of locked-room whodunits reminded me of popular BBC series Jonathan Creek. The show ran for three seasons between 1997–99. It returned with season 4 and 5 in 2003 and 2014 respectively. […]

  • DEV CommunityThe Giantsread at source

    Stringly-Typed Guardrails: how agent safety checks fail by matching the wrong thing

    The safest-looking part of an AI agent is often the guardrail: the little check that sits in front of a dangerous tool call and decides allow , ask , block , or redact this before you store it . It is the thing you point to when someone asks "but is it safe?" I have been auditing these guardrails in open-source agent plugins — code I run myself, in Docker, and report privately before writing anything. Two of them, from unrelated authors, failed the same way. A third, which I will write up once its maintainer ships a fix, failed the same way again. The pattern is common enough, and quiet enough, that it deserves a name. I will call it a stringly-typed guardrail : a safety check that makes its decision by matching patterns on surface text — the command string, a path as written, a secret as spelled — instead of on the ground truth it cares about: the file that is actually read, the action that is actually taken, whether a human can actually approve. Because many different strings denote the same real effect, anyone who wants past the guard just picks a spelling the pattern does not cover. And these guards almost always fail open . Case A — the redactor that doesn't redact needs-you is a Hermes plugin that shows pending approval requests. It promises "redacted previews only," and its own code comment is explicit about why: "we still scrub before persisting so secrets do not land in plugin-data." The storage layer persists only the redacted preview, so the entire guarantee rests on one function, redact_text() — five regular expressions. Those five regexes catch key=value , Authorization: Bearer … , OpenAI sk-… , GitHub ghp_… , and Slack xox… . Good start. But a secret is not a keyword followed by = . I ran the real function against ordinary ways people put secrets on a command line. These all sailed straight through into cleartext on disk: mysql -u root --password Sup3rSecret # space-separated flag, no '=' psql postgres://admin:hunter2@db/prod # credentials in a URL export AWS_SECRET_ACCESS_KEY = wJalr… # 'secret' is followed by '_access_key=' curl '…?key=AIzaSy…' # Google API key git push https://github_pat_11ABC…@github.com # fine-grained PAT (only ghp_ is covered) echo '-----BEGIN RSA PRIVATE KEY-----…' # a private key block stripe --api-key sk_live_51… # underscore, not the hyphen sk- expects The guard matched the shape of a written secret it had seen before , not the presence of a secret . Change the spelling, keep the meaning, and the credential lands on disk in cleartext — exactly what "secrets do not land in plugin-data" promised it would not. I reported it as an open issue with patterns; the deeper fix is to stop denylisting spellings and start detecting secrets by structure and entropy. Case B — the approval that approves itself airlock is a guardrail plugin for Hermes Agent, against prompt injection. Its model is sound: in a session that has read untrusted content, an outbound action that could exfiltrate data gets approve — ask the human. And it is careful about the dangerous edge: if approvals are switched off ( --yolo , approvals.mode: off , cron), then "ask the human" has no human, so it blocks instead. To decide "are approvals off?", it read the global switches: the --yolo flag, the environment. That is the surface signal. The ground truth is a different question — can a human approve THIS turn? — and for a turn launched by the gateway as hermes -z , the answer was "no human," but it was recorded in the turn's own state, not in the global flags the guard checked. So an action that should have been blocked (no one to approve) was approve d, and in an unattended run approve quietly means run it . A tainted session could exfiltrate a file. Same shape as Case A. The guard asked a proxy ("do the global flags say yolo?") for a ground-truth question ("is a human actually here?"), and an input that answered the two differently walked through. This was reported privately, fixed quickly and well in 0.2.3 — the fix asks the framework's own approval code why it would approve, covering every unattended mode — and published as GHSA-mgf8-gh7g-q4rg . Credit to the maintainer for a fast, thorough fix. Why this keeps happening Guardrails live in a hard spot. They sit beside the real executor — the shell, the HTTP client, the memory store — and try to predict what that executor will do by reading the same text the model emitted. But the executor resolves $HOME , expands globs, follows a URL's userinfo, treats --password x and password=x identically. The guard, matching strings, does not. Every gap between "what the text looks like" and "what the machine will do" is a bypass, and there are endless equivalent spellings for any given effect. Three tells that you are looking at a stringly-typed guardrail: It decides from the raw command/argument text , not from the resolved resource or the real call it will make. Its coverage is a denylist of spellings — known secret prefixes, known path shapes, known flags — so anything unlisted is implicitly safe. It fails open. When the pattern does not match, the default is allow / don't redact / don't ask , not stop . How to build a guard that isn't stringly-typed Check ground truth, not the label. Resolve the path (expand $HOME , ~ , symlinks) before deciding; classify by the actual HTTP method or resolved resource, not the tool's name or the argument string. Derive the real state. "Can a human approve this?" should come from the live per-turn state, not from a global flag that a new run-mode can desynchronize. Detect by structure, not spelling. For secrets, score entropy and known credential structures; redact high-entropy runs and userinfo and key blocks, rather than enumerating prefixes. Fail closed. If you cannot tell, refuse or ask. A guard whose unknown-case default is allow is a suggestion, not a control. There is a more radical version of "fail closed," which is the project I work on. In CleiMesh , a signed capability becomes the actual configuration of a WebAssembly sandbox: the agent's file tools only ever see the folders you granted, enforced by the sandbox, not by a string check in front of it. Reading untrusted content taints the agent, and subsequent writes are refused — not "asked about," refused — until a human with access to the node clears it. There is no "ask the human" prompt to desynchronize and no command string to out-spell, because the decision is not made by looking at text. The cost is real and I am honest about it in the threat model: there is no per-call "yes, just this once" yet. But a control that cannot be out-spelled is worth that cost. The takeaway If you ship a guardrail, try to defeat it with synonyms. Spell the path with $HOME . Put the secret after a space instead of an = . Launch the turn in every unattended mode you support — cron, oneshot, webhook, subagent. If a different spelling of the same action gets a different decision, your guard is reading the label, not the box. Make it read the box, and make the unknown case stop . Found while auditing open-source agent plugins in Docker, each reported to its maintainer before writing this. Thanks to the maintainers who build these guards in the open and fix them in the open.

  • DEV CommunityThe Giantsread at source

    How to Structure Your First SaaS Google Ads Search Campaign

    If you're a developer-founder running your own Google Ads instead of hiring an agency, the biggest early mistake is dumping every keyword into one ad group with one generic ad. Google's Quality Score rewards tight relevance between keyword, ad copy, and landing page — so structure matters more than budget when you're starting out. Here's a practical structure for a first SaaS search campaign. 1. Split into 5-7 themed ad groups Don't group by feature alphabetically — group by buyer intent. A typical SaaS campaign might look like: Brand (your product name + close misspellings) Category terms ("project management software", "[your category] tool") Competitor terms (if your ToS/legal allows it) Problem-aware terms ("how to track team tasks", "[pain point] solution") Alternative/comparison terms ("[competitor] alternative") Free trial / pricing intent ("[category] free trial", "[category] pricing") Integration-specific terms if you integrate with popular tools Each of these behaves differently in terms of cost-per-click and conversion rate, so they need separate budgets and separate ads, not one blended group. 2. Keep keyword sets tight per group Aim for 10-20 closely related keywords per ad group, all phrase or exact match once you have data. Broad match early on burns budget on irrelevant traffic — especially risky when you're bootstrapping ad spend yourself. 3. Shared negative keyword lists Build one shared negative list across all ad groups for the obvious non-buyers: "free", "jobs", "course", "tutorial", "reddit", competitor names you don't want to borrow traffic from accidentally, and your own brand name excluded from non-brand groups. Apply it at the campaign level so you're not duplicating negatives seven times. 4. One strong ad per group, not five mediocre ones Early on, write one responsive search ad per ad group that speaks directly to that group's intent — a "free trial" group ad should lead with the trial offer, a "competitor alternative" group ad should lead with the differentiation. Resist the urge to A/B test five variations before you have enough volume to read results; one focused ad per group beats five diluted ones. 5. Match landing pages to intent Send problem-aware traffic to a page that addresses the problem, not your homepage. Send pricing-intent traffic to a page with pricing visible above the fold. Mismatched landing pages quietly kill Quality Score and inflate CPCs. If you want a shortcut for the planning step, I work on AdeptAds , a free campaign brief builder that turns your business inputs into a draft campaign structure (ad groups, keyword themes, shared negatives) you can review and adjust before building the real thing in Google Ads. No credit card to start. What does your current ad group structure look like? Curious how other founders running their own search campaigns are splitting intent.

  • DEV CommunityThe Giantsread at source

    Building a Free Marriage Biodata Maker: Lessons from Biodata99

    In India, a marriage biodata is a one-page profile that families share when looking for a match. It usually covers personal details, education, career, family background, and a photo. Most people still make it in Word or Canva, fiddling with tables and alignment for an hour. That's why I built Biodata99 : a free tool where you fill in your details, pick a template, and download a clean biodata in a few minutes. The problem Making a good biodata by hand has the same few annoyances every time: Layouts break when you add or remove a line. Photos shift and tables misalign. Every family wants a slightly different set of fields. The final file has to look good on a phone, because most biodatas are shared over WhatsApp. The goals I set No friction. No long sign-up before you can see a result. Looks good by default. Templates should work even if you never touch the design. Mobile first. Most users open it on a phone. Fast. The preview should update as you type. What I learned 1. Forms are the product. The tool is mostly a form. Grouping fields into small sections (personal, family, education, career) and keeping labels clear mattered more than any visual polish. 2. Live preview builds trust. Seeing the biodata change as you type makes people feel in control and cuts down abandoned sessions. 3. Export quality matters. A biodata is printed and shared as a file, so the downloaded output has to look as good as the preview, with fonts, spacing, and the photo all intact. 4. Defaults beat options. I started with many settings and cut most of them. Fewer choices meant faster completion. 5. Plan for search from day one. People search for things like "marriage biodata format", so clear page titles, fast loading, and useful content on each template page made a real difference. What's next I'm adding more templates, more field options, and improving the download quality. If you've built a similar form-to-document tool, I'd love to hear how you handled export and mobile layout. You can try it here: biodata99.com Feedback is welcome in the comments.

  • DEV CommunityThe Giantsread at source

    Microsoft's Voluntary Retirement Offer: A Shift in Tech Careers

    The New Era of Employment Choices In a surprising move, Microsoft has introduced its first-ever voluntary retirement program, marking a significant shift in its approach to workforce management. This initiative, which offers eligible employees a financial payout and extended healthcare, is a notable response to the rapidly evolving landscape of technology, particularly as artificial intelligence (AI) takes center stage. For software engineers and tech leads, this development is not just a corporate strategy; it’s a signal of the changing dynamics in tech careers amid the AI revolution. Understanding the Voluntary Retirement Offer Announced on April 23, 2026, the voluntary retirement program targets approximately 8,750 eligible employees at the senior director level and below, based on the 'Rule of 70'—where an employee's age plus years of service total 70 or more. This initiative comes after substantial layoffs in the previous year and a hiring freeze in select divisions, although teams focused on AI and tools like Copilot are exempt from these restrictions. Chief People Officer Amy Coleman framed this offer as providing employees with the freedom to choose their next steps on their own terms. This voluntary program, however, raises questions about the underlying motivations. Is it a strategic move to streamline operations, or is it a softer approach to layoffs as Microsoft pivots its focus towards AI? The debate is ongoing, and while some see it as an opportunity for employees, others view it as a necessary step in a challenging economic climate. The Intersection of AI and Employment With Microsoft's heavy investment in AI—reportedly spending $37.5 billion in capital expenditures in just one quarter—the shift towards automation and AI technologies is becoming increasingly pronounced. As companies integrate AI into their operations, the demand for certain job roles is likely to diminish, while others will evolve or emerge. For software engineers and tech leads, this signals a critical need to adapt and reskill. The evolution of job roles in tech is inevitable; those who embrace continuous learning and adaptability will find themselves better positioned in the job market. AI is not just a tool; it's changing the very nature of how we approach problem-solving and software development. What This Means for Tech Careers 1. Embrace Lifelong Learning In light of the rapid advancements in AI, staying updated with the latest technologies and methodologies will be crucial. Professionals should actively seek out training opportunities, whether through formal education, online courses, or industry conferences. Being well-versed in AI and its applications can enhance your employability and open doors to new opportunities. 2. Focus on Soft Skills As technical skills evolve, soft skills like communication, collaboration, and critical thinking will become increasingly valuable. The ability to work effectively in teams, especially in interdisciplinary environments that combine AI with other fields, will set candidates apart. Tech leads should prioritize developing these skills within their teams as well. 3. Consider the Bigger Picture The voluntary retirement offer from Microsoft might be a sign of broader trends in the tech industry. As companies navigate economic uncertainties and technological transformations, understanding the strategic direction of your organization can help you align your career goals accordingly. Keep an eye on industry trends and be prepared to pivot when necessary. 4. Networking and Professional Connections Building a strong professional network can be a vital asset, especially during times of change. Engage with peers in the industry through meetups, online forums, or social media. Networking can provide insights into job openings, industry trends, and potential collaborations, helping you stay relevant in a competitive landscape. The Debate: Opportunity or Necessity? The introduction of Microsoft's voluntary retirement program has sparked discussions about the future of employment in the tech industry. Some commentators argue that this move may be a necessary step in preparing for the future of work in an AI-driven world, while others view it as a symptom of a broader trend towards workforce reduction in favor of automation. Regardless of the perspective, it is clear that the tech industry is at a crossroads. For software engineers and tech leads, the ability to navigate this landscape with agility and foresight will be essential. This moment calls for reflection on career paths, skill sets, and professional aspirations in the face of profound changes brought on by AI and automation. Conclusion As Microsoft takes this unprecedented step, it serves as a reminder to all tech professionals that change is not only inevitable but also an opportunity for growth and reinvention. The age of AI is here, and with it comes the responsibility of adapting and evolving in our careers. By embracing lifelong learning, enhancing soft skills, understanding industry trends, and nurturing professional connections, we can all position ourselves for success in this new era. Source: https://thenextweb.com/news/microsoft-voluntary-retirement-us-workers-ai

  • DEV CommunityThe Giantsread at source

    The UGC Ad Playbook: Create Ads That Convert

    You don't always need a professional camera, a studio, or a huge production budget to create an effective advertisement. Sometimes, a simple video recorded on a smartphone can outperform a beautifully produced commercial. Think about the last time you watched an Instagram Reel or TikTok. You probably scrolled past several polished advertisements but stopped when someone demonstrated a product, explained a problem, or showed something genuinely useful. That's part of what makes user-generated content (UGC) so interesting for performance marketers. UGC-style videos can make product advertising feel more natural, relatable, and easier to understand. Instead of presenting a product through a traditional commercial, the creative shows how it fits into someone's life. But there's an important distinction. A video that looks authentic doesn't automatically become an ad that converts. You still need the right hook, a clear product benefit, a compelling offer, and a reason for the viewer to take action. In this guide, we'll break down how to create UGC-style ads that are designed to drive business results, how to test different creative approaches, and how to measure whether your videos are actually working. 1. What Is UGC Advertising? UGC stands for user-generated content. Traditionally, it refers to content created by customers or users, such as product reviews, photographs, videos, and personal experiences. In advertising, the term is also commonly used for creator-produced videos designed to feel like everyday social content. For example, a skincare brand might feature a creator demonstrating how they use a moisturizer. An e-commerce brand might show someone unboxing a product and explaining its features. There are two important categories: Organic UGC: Content customers create and share independently. UGC-style ads: Content created or commissioned specifically for advertising, often using a relatable, creator-led format. These aren't exactly the same thing. If a brand pays a creator to produce an advertisement, that content shouldn't be presented as an independent customer review unless it genuinely is one. Authenticity matters. Paid partnerships, gifted products, and other material relationships should be disclosed appropriately. Why can UGC-style ads work? They can help potential customers: Understand how a product works. See its size, appearance, texture, or features. Imagine how it might fit into their daily lives. Get answers to common purchasing questions. See a relatable demonstration rather than a list of claims. For many products, showing the experience is more persuasive than simply describing it. Consider two advertisements for a backpack. Ad A: A product photograph with the text "Premium backpack. Shop now." Ad B: A person packs a laptop, charger, notebook, and water bottle into the backpack, then shows how it fits during a commute. Ad B gives the viewer more information about the product and how it might be used. That doesn't guarantee better performance, but it gives the creative a clearer purpose. 2. The Anatomy of a High-Converting UGC Ad A strong UGC-style ad usually combines several elements. Here's a practical structure you can use as a starting point: Hook | v Problem or Desire | v Product Demonstration | v Benefit or Proof | v Objection Handling | v Call to Action Let's break down each stage. The hook The hook gives viewers a reason to stop scrolling. It might be a question, a product demonstration, a relatable situation, or a surprising but truthful observation. Examples: "Looking for a backpack that fits your work essentials?" "Here's what actually fits inside this travel bag." "Before buying a new desk lamp, check this feature." "Three things I would compare before choosing a moisturizer." The goal isn't to trick people into watching. It's to quickly communicate why the video might be useful to them. The problem or desire Explain what the audience cares about. For example, someone buying a travel bag may care about storage, comfort, durability, and organization. Someone shopping for skincare may care about ingredients, texture, suitability, and ease of use. Choose the concern most relevant to the product and the audience. The product demonstration Show the product doing something meaningful. Examples include: Demonstrating how a storage compartment works. Showing the fabric and stitching of a garment. Comparing the dimensions of two products. Showing how a kitchen tool is used. Demonstrating a software feature on screen. The more clearly viewers understand the product, the easier it becomes for them to evaluate whether it meets their needs. The benefit or proof Explain what the demonstration means for the customer. Instead of merely saying "This bag has multiple compartments," show how those compartments help organize a laptop, charger, and accessories. Use evidence that supports your claims. If you don't have verified durability testing, don't claim that a product is the most durable option available. Objection handling People often hesitate because they have unanswered questions. Common concerns include: Is the product worth the price? What size should I choose? Does it work with my existing equipment? What's included in the package? What happens if I need to return it? Address the most important concern naturally within the video. The call to action Tell viewers what to do next. For example: "Explore the available colors." "Check the size guide before ordering." "Compare the available plans." "See the full product details." Your CTA should match the campaign objective and the viewer's stage in the buying journey. 3. Write Better Hooks Before Recording the Video One of the easiest mistakes is spending hours recording a product video before deciding what the video is supposed to communicate. Start with the hook. A good hook identifies something relevant to the intended audience and gives them a reason to keep watching. Here are five useful hook frameworks. Hook framework Example Problem-led "Struggling to keep your work bag organized?" Demonstration-led "Here's everything I can fit inside this bag." Comparison-led "What changes when you compare these two designs?" Question-led "What should you check before buying a desk lamp?" Use-case-led "A closer look at what this travel organizer can do." These are starting points, not guaranteed winners. A hook that works for one product may be irrelevant to another. The key is to match the opening to the audience's actual needs. A simple hook-writing exercise Before filming, write ten possible hooks for the same product. For a reusable water bottle, those might focus on: Capacity. Ease of cleaning. Portability. Leak resistance, if verified. Temperature retention, if tested. Available colors. Compatibility with a bag's side pocket. Daily use. Materials and care instructions. Comparison with another size. Then select two or three distinct approaches worth testing. Avoid producing ten hooks that differ only by one word. You want to learn which underlying message resonates with the audience. 4. Use a Simple UGC Script Formula You don't need a complicated screenplay to create a useful product video. Start with a structure that explains the product clearly. Here's an example for an e-commerce backpack. Product: Everyday commuter backpack. Audience: Students and professionals who carry several daily essentials. Video objective: Generate qualified product-page visits. Length: Approximately 20–30 seconds, depending on delivery and editing. Example script Scene 1 — Hook Visual: The creator places a laptop, charger, notebook, and water bottle on a desk. Voiceover: "Looking for a backpack that can organize your everyday essentials?" Scene 2 — Demonstration Visual: The creator packs the items into the relevant compartments. Voiceover: "Here's a closer look at how the compartments are arranged and what fits inside." Scene 3 — Product details Visual: Close-up shots of the zippers, straps, material, and interior. Voiceover: "You can check the dimensions, materials, and storage layout before choosing the size that works for you." Scene 4 — Objection handling Visual: The creator shows the bag being carried and places it next to a laptop for scale. Voiceover: "If you're carrying a laptop, compare its dimensions with the bag's specifications before ordering." Scene 5 — CTA Visual: Product page or clear shot of the bag. Voiceover: "Explore the available colors and check the full product details." Notice what this script does. It demonstrates the product, provides useful information, and helps the customer make a decision without relying on exaggerated claims. You can adapt the same structure for fashion, beauty, electronics, home products, and many other categories. 5. Film Product Videos That Feel Natural A UGC-style ad doesn't need to look unprofessional. It needs to feel appropriate for the platform and the product. A smartphone, natural lighting, and a quiet room can be enough to create a useful first version. Basic filming checklist Lighting Face a window or use soft lighting so viewers can clearly see the product. Audio Record in a relatively quiet environment. Clear speech matters more than expensive equipment. Framing Keep the product visible and avoid distracting backgrounds. Demonstration Show the important features close enough for viewers to understand them. Pacing Remove unnecessary pauses, repeated explanations, and irrelevant footage. Text overlays Use readable text to highlight important information, such as product dimensions, prices, or key features. Captions Add accurate captions when they improve accessibility and make the video easier to understand without sound. Mobile viewing Preview the creative on a phone. Make sure text, product details, and important visual elements remain visible within the placement's interface. Don't make every video look identical Creative consistency is useful, but copying the same template across every product can make your advertising repetitive. Try different formats: Creator speaking directly to the camera. Hands-only product demonstration. Unboxing. Voiceover with close-up shots. Customer FAQ. Side-by-side product comparison. Screen recording for software products. The right format depends on what the customer needs to understand. For a software product, a screen recording may be more useful than a person holding a phone and talking about it. For clothing, seeing the fit and fabric may be more valuable than a long voiceover. Choose the format that demonstrates the product best. 6. Create Different Creative Angles, Not Just Different Videos Imagine you run a campaign with five videos. All five use the same message, show the same product shot, and make the same offer. Only the background music changes. Technically, you have five videos. Strategically, you may have only one creative idea. A better approach is to develop different angles. For a skincare product, you might test: Angle A: Product demonstration Show the texture, packaging, and application process, using accurate descriptions. Angle B: Ingredient education Explain the relevant ingredients and what reliable evidence supports about them. Angle C: Routine integration Demonstrate where the product fits into a daily skincare routine. Angle D: Frequently asked questions Answer genuine questions about usage, packaging, ingredients, or suitability. Angle E: Product comparison Compare sizes, formats, or features using accurate information. Each angle addresses a different reason someone might consider buying the product. This is useful because the best creative isn't always the one with the most visually impressive production. It may be the one that answers the audience's biggest unanswered question. 7. Turn One Product Into a Creative Testing Matrix A creative testing matrix helps you organize experiments systematically. Instead of producing videos randomly, choose a few meaningful variables. For example: Variable Version A Version B Hook Problem-led Demonstration-led Format Creator speaking Hands-only demo Main message Convenience Product features CTA Explore the product Check available options You don't necessarily need to test every combination at once. If your budget or conversion volume is limited, start with a smaller number of distinct concepts. Keep the test focused enough that the results are interpretable. For example, compare two different hooks while keeping the rest of the creative reasonably consistent. Later, once you understand which message works better, test different demonstrations or offers. A structured testing process helps you learn why a creative performs differently instead of merely identifying which video happened to receive more conversions. 8. Measure What Happens After the View A UGC ad can receive thousands of views and still generate very few sales. That's why creative performance needs to be evaluated alongside the customer journey. Here are the metrics I'd start with. Hook retention or early video retention Depending on the platform's available reporting, examine how many people continue watching after the opening. This can help you understand whether the opening captures attention. However, strong retention alone doesn't prove purchase intent. Click-through rate CTR measures the proportion of impressions that result in the relevant type of click. Be clear about which CTR you use. Link CTR, outbound CTR, and all-click CTR measure different things. A high CTR can indicate that the creative attracts interest, but it doesn't tell you whether the visitors purchase. Landing page views Compare clicks with actual landing page views. If there is a large gap, investigate loading speed, redirects, tracking, and traffic quality. Add-to-cart rate This helps you understand whether visitors are interested enough to begin the buying process. A weak add-to-cart rate may indicate a mismatch between the ad and product page, an unconvincing offer, or other issues. Cost per acquisition For a purchase-focused campaign: CPA = Advertising Spend ÷ Attributed Purchases Use the same attribution and reporting definitions when comparing campaigns. Return on ad spend ROAS = Attributed Revenue ÷ Advertising Spend ROAS is useful, but it doesn't account for all product costs, fulfilment costs, and other business expenses. A creative that generates sales at an attractive ROAS may still be unprofitable if margins are low. For a deeper look at this topic, you can also read my article on the marketing metrics that reveal real profitability . Replace the example link with your actual published article URL. 9. A Practical Creative Analysis Example Let's imagine an online store testing two UGC-style videos. The following numbers are hypothetical and illustrate how you might analyze the results. Metric Creative A Creative B Advertising spend ₹5,000 ₹5,000 Impressions 50,000 40,000 Link clicks 750 600 Landing page views 600 520 Purchases 12 18 Attributed revenue ₹12,000 ₹18,000 Let's calculate the key metrics. Creative A Link CTR: 750 ÷ 50,000 × 100 = 1.5% Cost per purchase: ₹5,000 ÷ 12 = ₹416.67 ROAS: ₹12,000 ÷ ₹5,000 = 2.4× Creative B Link CTR: 600 ÷ 40,000 × 100 = 1.5% Cost per purchase: ₹5,000 ÷ 18 = ₹277.78 ROAS: ₹18,000 ÷ ₹5,000 = 3.6× In this hypothetical example, both creatives have the same link CTR, but Creative B generates more purchases and higher attributed revenue for the same spend. This is a useful reminder that click-through rate alone cannot determine which creative is better. However, the data doesn't automatically prove why Creative B performed better. You would need to examine the creative differences, landing page behavior, audience delivery, attribution settings, and other relevant factors. You should also check whether the results are sufficiently stable before making a scaling decision. Finally, compare the campaigns' contribution after product costs, fulfilment, and advertising. Higher ROAS is useful, but profitability remains the business objective. 10. Automate Your UGC Creative Workflow With AI AI tools can help you produce creative concepts more efficiently. But the best use of AI isn't to generate hundreds of generic scripts and publish them without review. It's to speed up research, organization, and iteration. Here's a practical workflow: Product Information | v Customer Questions and Reviews | v Creative Angle Generation | v Hook and Script Drafts | v Fact and Claims Review | v Creator Brief | v Video Production | v Human Approval | v Campaign Launch | v Performance Analysis | v New Creative Experiments Each stage should have a clear purpose. For example, AI can help summarize customer questions, identify recurring objections, generate alternative hooks, and organize creative test ideas. A marketer should still verify the findings, check product claims, and decide which concepts are worth producing. Example: Generate creative angles with Python You can use a model API to generate structured creative ideas from verified product information. Here's a simplified example: def generate_ugc_brief ( product , audience , model ): prompt = f """ You are helping a performance marketing team plan UGC-style video advertisements. Product: { product } Target audience: { audience } Create five distinct creative concepts. For each concept, include: - Creative angle - Opening hook - Product demonstration - Key benefit - Suggested CTA - Evidence needed to support claims Requirements: - Do not invent product features. - Do not fabricate customer testimonials. - Avoid unsupported performance claims. - Keep each concept distinct. - Mark missing information clearly. """ return model . generate ( prompt ) Here, model.generate() represents the interface of your chosen model provider. Replace it with the appropriate SDK call. This function creates a planning brief, not a ready-to-publish advertisement. Before production, review the concepts against the actual product specifications, brand guidelines, advertising requirements, and customer needs. Where automation helps most You can automate or partially automate: Organizing customer feedback. Categorizing recurring questions. Generating creative briefs. Producing initial script drafts. Naming and tagging creative assets. Calculating performance metrics. Summarizing weekly test results. Identifying concepts worth further investigation. Keep human approval for claims, testimonials, brand-sensitive messaging, and important publishing decisions. 11. Common UGC Ad Mistakes to Avoid Even a well-planned creative process can fail when the execution is poor. Here are some common mistakes worth checking. Mistake 1: Making the video look authentic but giving viewers no useful information. A casual style isn't a substitute for a clear message or product demonstration. Mistake 2: Using a hook that doesn't match the product. A dramatic opening may attract attention, but if it misleads viewers or attracts the wrong audience, the downstream results may suffer. Mistake 3: Making unsupported claims. Don't invent customer results, product benefits, reviews, or performance statistics. Mistake 4: Testing too many variables simultaneously. If the hook, offer, audience, and landing page all change, it becomes difficult to identify what influenced the result. Mistake 5: Optimizing only for views or clicks. Attention is useful only when it contributes to the campaign's actual objective. Mistake 6: Ignoring the landing page. A strong video cannot compensate for broken checkout, unclear pricing, or an irrelevant product page. Mistake 7: Copying competitors without understanding why their creative works. A competitor's video may depend on its audience, brand reputation, pricing, or distribution strategy. Copying the format doesn't reproduce those conditions. Mistake 8: Treating every creative as a guaranteed winner or loser too quickly. Small samples produce noisy results. Evaluate the evidence and give experiments an appropriate opportunity to produce meaningful data. 12. Your UGC Ad Launch Checklist Before launching a new creative, check the following. Strategy [ ] The target audience is clearly defined. [ ] The creative has one primary message. [ ] The hook is relevant to the audience. [ ] The product benefit is clear. [ ] The CTA matches the campaign objective. Production [ ] The product is shown clearly. [ ] Audio and lighting are adequate. [ ] Captions and overlays are readable. [ ] The video works on mobile. [ ] The opening communicates value quickly. [ ] The creative doesn't rely on unnecessary filler. Trust and compliance [ ] Product claims are supported. [ ] Testimonials are genuine. [ ] Paid relationships are disclosed where required. [ ] Required usage rights and creator permissions are in place. [ ] The creative follows applicable platform policies. Measurement [ ] The relevant conversion events work. [ ] The campaign objective matches the business goal. [ ] CTR definitions and reporting windows are consistent. [ ] Purchases and revenue can be verified. [ ] Target acquisition costs are defined. [ ] There is a clear plan for evaluating the test. Final Thoughts UGC-style advertising isn't about making every brand look like an ordinary person recording a video. It's about communicating value in a way that feels natural, demonstrates the product, and helps the right audience make a decision. Start with a clear customer problem. Write a relevant hook. Show the product rather than relying entirely on claims. Address genuine questions. Test distinct creative concepts. Then evaluate what happens after the click. AI can help you research, draft, organize, and analyze creative experiments, but the quality of your marketing still depends on understanding your audience and delivering a product worth buying. Don't create videos just to fill your content calendar. Create videos to answer customer questions, test meaningful hypotheses, and improve business outcomes. That's how UGC-style creative becomes a useful part of a performance marketing system. Useful Resources Meta for Business — Advertising tools and creative resources. Meta Advertising Standards — Review advertising requirements before launch. Google Analytics Help — Understand website and conversion measurement. TikTok for Business — Explore short-form advertising resources. Python Documentation — Build your own reporting and creative analysis workflows.

  • Hacker News Front PageThe Giantsread at source

    Kentucky man becomes the first humanist granted religious exemption from AI

  • Hacker News Front PageThe Giantsread at source

    Show HN: Nasscad – local-first 3D CAD for browser and Windows

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Nasscad – local-first 3D CAD for browser and Windows

    Comments

  • Hacker News Front PageThe Giantsread at source

    Emacs Turns 50

  • Hacker News Front PageThe Giantsread at source

    ICE Is Running One of the Largest Anti-Left Surveillance Ops in US History

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Peregrine – Integrated Terminal and File Browser

    Comments

  • Hacker News Front PageThe Giantsread at source

    Two high-speed trains collide near Toledo, Spain

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Popkern – open-source CAD kernel with G2 corner blends, browser IDE

    Comments

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: I worked at an ATS, so I built Recruiter BFF for Claude and ChatGPT

    Comments

  • CSS WizardryTop Front-end Bloggersread at source

    Web-Perf Wednesday 015 – Failed Modulepreloads Need to Recover

    WebKit fixes failed modulepreloads that could block recovery, while Safari and Firefox improve performance tooling and browser responsiveness.

  • SyntaxPodcastsAudioListen

    1051: Mourning the Death of Code

    Scott and Wes tackle your potluck questions, from passing context between Claude Code and Codex to whether AI-generated skills are any good. Plus high-fidelity Figma builds, WebSerial reconnects on an ESP32, AG-UI vs WebMCP, a listener who thinks Syntax is too pro-AI, and…

  • Hacker News: Show HNLibraries, Frameworks, etc.read at source

    Show HN: Squishy 3D helpers powered by Three.js

    Comments

  • Flavio CopesMore Front-end Bloggersread at source

    The complete guide to AI image generation

    Learn AI image generation from prompts to finished assets, with hosted models, creative tools, local workflows, ComfyUI, and JavaScript APIs.

  • Net NinjaYouTube ChannelsVideoWatch on YouTube

    GitHub Copilot App Tutorial #4 - Pull Requests and Issues

  • Flavio CopesMore Front-end Bloggersread at source

    The big players in AI coding: models, tools, and who to follow

    A guide to OpenAI, Anthropic, Cursor and SpaceX, Google, Meta, GitHub, and OpenCode: their coding models, tools, influence, and people to follow.

  • Flavio CopesMore Front-end Bloggersread at source

    Internet Business Lab is open

    Join Internet Business Lab to work on finding customers, pricing, and selling your work. The cohort starts October 29, with 17 weekday lessons.

  • Flavio CopesMore Front-end Bloggersread at source

    Which business advantages can a solo developer build?

    Learn which advantages a solo software business can build, how to test their value, and what data, distribution, and network effects cost to maintain.

  • Christian HeilmannTop Front-end Bloggers3 min read

    Pardon my dust – re-homing 21 years of blog content of christianheilmann.com

    I’ve been a bit silent here lately. The reason is on the one hand life and issues with that but also problems with the hoster of this blog, specifically the SSL certificate. I’ve spent some fun hours on the phone with helpdesk and it’s still, well, complicated. That’s why I finally took the plunge and […]

  • HeyDesignerDeveloper/Designer Newsread at source

    Struggle together

    I gave my website a boss fight, The system I no longer know by heart, Two kinds of code review, A select should tell you something.

  • Frontend Masters BlogMore Front-end Bloggersread at source

    How I Used Claude Code to Speed Up My Shell Startup by 95%

    I like the idea of "Please suggest 10 improvements to my ~/.zshrc" as a prompt (John Lindquist). Nick Taylor wrote up all the stuff it found for him and got nearly a second back for every fresh terminal opened.

  • AbduzeedoMulti Author Blogsread at source

    Ballet National de Marseille: Kinetic Web Design & CSS Type

    Dissecting the Ballet National de Marseille web design on Hover States, featuring sticky viewport panels, bold grotesk type, and 3D CSS loops. Most performing arts sites play it safe with rigid ticket...

  • AbduzeedoMulti Author Blogsread at source

    How COLLINS Reimagined Branding for Muse Group

    COLLINS unites Ultimate Guitar, MuseScore, and Audacity under a rhythmic branding system for music software powerhouse Muse Group. Most musicians know the tools, not the parent company. Muse Group qui...

  • SitePointThe Giantsread at source

    How AI Agents Can Access More Up-to-Date Information

    null Continue reading How AI Agents Can Access More Up-to-Date Information on SitePoint .

  • Next.js BlogLibraries, Frameworks, etc.read at source

    Upcoming Next.js November Security Release

    Next.js is preparing a scheduled November security release for November 3, 2026.

  • AbduzeedoMulti Author Blogsread at source

    Inside the Craft of Woven Whisky Branding by Freytag Anderson

    Freytag Anderson built Woven whisky branding around one idea: blending as weaving, from a frosted apothecary bottle to a graphic for every blend. Freytag Anderson's clients, Pete and Duncan, came with...

  • Mux BlogCompany/Startup Blogs8 min read

    Humans and agents rejoice: Mux Robots is now GA

    Mux Robots is generally available (GA), with a stable v1 API, two new AI workflows for video structure and written content, and six months of improvements.

  • HeyDesignerDeveloper/Designer Newsread at source

    No more icons in every menu by default

    Nobody asked for the sparkle button, How I work, Behind Apple Music’s new brand identity, Entering Atomic Design from the screen, and more.

  • Google for DevelopersYouTube ChannelsVideoWatch on YouTube

    Introducing Genie 4

  • Engineering at MetaCompany/Startup Blogs18 min read

    PrivacyLib: Privacy Controls at the Data Access Boundary

    This latest deep dive into Meta’s Privacy Aware Infrastructure (PAI) takes a look at PrivacyLib. A privacy requirement must hold as data moves through Meta’s diverse data and processing systems. Historically, supporting a new requirement meant implementing the same enforcement logic separately in each system. PrivacyLib replaces this with a common library that runs inside [...] Read More... The post PrivacyLib: Privacy Controls at the Data Access Boundary appeared first on Engineering at Meta .

  • Engineering at MetaCompany/Startup Blogs7 min read

    Python Typing Survey 2026: AI Tools and the Shifting Checker Landscape

    The 2026 Python Typing Survey received 1,794 responses. Type hint use changed little across three years, but checker selection changed sharply. Among respondents who reported which checkers they use, half selected more than one, and missing library type information was the most common difficulty. For the third consecutive year, we asked Python developers how they [...] Read More... The post Python Typing Survey 2026: AI Tools and the Shifting Checker Landscape appeared first on Engineering at Meta .

  • CSS-TricksThe Giantsread at source

    What’s !important #19: CSS Refraction Effects, Scroll State Queries, @custom-media, and More

    We’re back! Don't worry, this isn’t a trick (despite what our name suggests!). However, due to the hiatus, we're also a little behind. That’s why this issue of What’s !important is absolutely stacked. All killer, no filler. Here's what you missed. What’s !important #19: CSS Refraction Effects, Scroll State Queries, @custom-media, and More originally handwritten and published with love on CSS-Tricks . You should really get the newsletter as well.

  • Go Make ThingsMulti Author Blogs2 min read

    Signal your virtues

    Virtual signalling is often used as an insult, but it’s good to signal your virtues, actually. A few months back, I read a story on Bluesky from a hispanic woman who’s immigrant mother got lost in the city. Her phone ran of battery, she didn’t speak much English, and she had no idea how to get home. She approached a young woman with bright blue hair who was able to use her phone’s translation app to get the mother’s address and help her get home.

  • DXDMore Front-end Bloggersread at source

    Processo de desenho do Não é Só um Logótipo

    O processo de desenho da identidade visual do "Não é Só um Logótipo" foi uma mistura entre planeamento, pesquisa e experimentação. O conteúdo Processo de desenho do Não é Só um Logótipo aparece primeiro em DXD .

  • Flavio CopesMore Front-end Bloggersread at source

    How to use GPT-6.1 Terra, OpenAI's new fast vision model

    Call GPT-6.1 Terra from the OpenAI Responses API to read an image, set a reasoning effort, and get structured JSON back.

  • freeCodeCamp.orgYouTube ChannelsVideoWatch on YouTube

    Jev Course – Prefill-Only Inference & Decision Models from Scratch

  • The Mozilla BlogBrowsers, engines, etc.3 min read

    Five Firefox updates you might have missed, and a look ahead

    Some of our latest Firefox updates have had big moments of their own, from the launch of our new design and built-in ad blocking on iOS to Firefox Enterprise and our partnership with NVIDIA GeForce NOW. You might’ve even spotted a few familiar internet OGs in our latest campaign. Other improvements might’ve flown under the […] The post Five Firefox updates you might have missed, and a look ahead appeared first on The Mozilla Blog .

  • The Mozilla BlogBrowsers, engines, etc.3 min read

    Skip the busywork with Smart Window

    The days might be getting shorter, but your to-do list is only getting longer. Whether you’re getting a head start on holiday shopping or planning your next career move, Smart Window’s newest features will help you keep up. Firefox’s opt-in AI browsing experience can now use information from tabs you choose to help fill out […] The post Skip the busywork with Smart Window appeared first on The Mozilla Blog .

  • AdactioTop Front-end Bloggersread at source

    Typewalk – Lettering in public spaces

    Capture lettering on signs, shop windows, and façades, then explore walks to the best finds in your city. adactio.com/links/22817

  • SitePointThe Giantsread at source

    How to Create Effective Cold Email Sequences That Generate Replies: A Developer's Guide

    null Continue reading How to Create Effective Cold Email Sequences That Generate Replies: A Developer's Guide on SitePoint .

  • W3C BlogBrowsers, engines, etc.1 min read

    W3C launches second pilot of program to support Open Source projects

    In this blog post, Ian Jacobs, Strategy Team, introduces the second pilot of the W3C Open Source program: a polyfill for the WebMCP API. WebMCP is a new JavaScript interface that allows web developers to expose their web application functionality as “tools”.

  • SitePointThe Giantsread at source

    7 Checks That Make Form Bugs Easier to Reproduce Across Teams

    null Continue reading 7 Checks That Make Form Bugs Easier to Reproduce Across Teams on SitePoint .

  • Flavio CopesMore Front-end Bloggersread at source

    Chrome Alternatives in 2026: 50 Web Browsers Compared

    Find a Chrome alternative for your computer and workflow. Use the browser chooser, then compare 50 browsers by engine, features, and practical tradeoffs.

  • SitePointThe Giantsread at source

    7 Ways to Keep API Changes Safe as More Teams Join a Project

    null Continue reading 7 Ways to Keep API Changes Safe as More Teams Join a Project on SitePoint .

  • Flavio CopesMore Front-end Bloggersread at source

    How to work with coding agents from your phone

    Use Codex, Claude Code, Cursor, Grok Bot, and other coding agents from your phone. Compare mobile apps, cloud tasks, and remote terminals.

  • AdactioTop Front-end Bloggersread at source

    CSS-Tricks has a new owner! | CSS-Tricks

    This is very good news! adactio.com/links/22816

  • Remote SynthesisMore Front-end Bloggersread at source

    Your Agent Just Deleted Prod (Web Unleashed Slide Deck)

    Just a quick post to share the slide deck from my presentation today at Web Unleashed in Toronto

  • SitePointThe Giantsread at source

    A Practical Workflow for Testing JavaScript Forms Before Deployment

    A practical workflow for testing JavaScript forms before deployment: catch the bugs users would hit, automate form checks, and ship every release with confidence. Continue reading A Practical Workflow for Testing JavaScript Forms Before Deployment on SitePoint .

  • HeyDesignerDeveloper/Designer Newsread at source

    Design as a garden

    Fast is a design decision, The software factory forgot about design, The state of typography in design systems, Software for one.

  • Net NinjaYouTube ChannelsVideoWatch on YouTube

    GitHub Copilot App Tutorial #3 - Viewing Files & Previewing

  • Flavio CopesMore Front-end Bloggersread at source

    How to protect secrets when coding agents deploy your app

    Learn how coding agents can expose secrets, compare ways to manage access, and add safeguards to builds, deployment pipelines, and production code.

  • HTML All The ThingsPodcastsAudioListen

    What Skills Will Stay in Demand as AI Improves?

    What skills will stay in demand as AI changes how we work? For developers, preparing for the future might mean looking beyond the next framework and building skills that open doors across different roles. Matt and Mike discuss five areas worth developing: ideation and…

  • Frontend Masters BlogMore Front-end Bloggers12 min read

    What should you put on a dynamic custom social media card image?

    There is technology to dynamically create custom social media cards (like this one!) — but what you put on it really depends.

  • AbduzeedoMulti Author Blogsread at source

    Franki Branding: Inside Koto's New Identity

    Koto's Franki branding turns restaurant discovery into a shared joke, with a yellow, rounded system built around the line Make Time Dance. The first thing you notice is the yellow. It is not a highlig...

  • JavaScript WeeklyMulti Author Blogsread at source

    Rebuilding the original GTA engine in JavaScript

    #​808 — October 27, 2026 Read on the Web JavaScript Weekly TanStack AI 1.0: The Vendor-Neutral AI Toolkit Goes Stable — TanStack's framework-agnostic AI toolkit reaches 1.0, with stable APIs for chat, tools and media, plus 23 provider adapters. A new agent harness supports long-running sessions, but its APIs remain experimental. Tuzlak, Herrington, et al. (TanStack) Would You Let Your AI Agent Grade Its Own Homework? — Agents write code faster than ever. They even review their own work. But who’s reviewing them? Dropbox, Notion & ElevenLabs don’t take the risk. With Meticulous, every change is exhaustively verified, with zero developer effort. Meticulous sponsor Announcing TypeScript 7.1 Beta — TypeScript 7 gets a programmatic API , plus 'content mappers', a plugin point for checking code embedded in files such as Vue, Svelte, and Astro components. Also new are source phase imports and --target es2026 . Daniel Rosenwasser (Microsoft) GTA.js: 1997's Grand Theft Auto , But in JavaScript — Bramus has been reimplementing the original top-down GTA's engine in JavaScript and WebGL, loading Liberty City from the game's original demo files. Play it here . Bramus Van Damme 💡 Fittingly, Pat Kerr, whose 1996 Atari ST prototype formed the basis of the original game's vehicle physics, recently rebuilt it in JavaScript . IN BRIEF: Deno's Bartek Iwańczuk says the team is working on getting Deno into a foundation . Meanwhile, a new fork, Ende , plans to drop Node compatibility and refocus on sandboxing. Safari 27.1 previews the Device Posture and Viewport Segments APIs behind feature flags on the iPhone Duo, letting JavaScript detect folds and inspect screen segments. Chrome 156 has reached stable and no longer caches module fetch failures, so a dynamic import() that fails due to a network or HTTP error can be retried. RELEASES: Node.js v26.12.1 (Current) , v24.22.1 (LTS) and v22.23.4 – Security releases fixing ten CVEs, including the 'Node2Shell' Brotli decoder flaw , which can lead to remote code execution when an app decompresses malicious data. (Also, Node 26 is due to become LTS tomorrow.) Bun 1.4.4 – Adds bun fmt , a Prettier-compatible formatter that uses your existing Prettier or oxfmt config. It's very fast. Electron 45 – Upgrades to Chromium 156, Node 24.22 and V8 15.6, and adds hooks for the Prompt API so apps can plug in a local model. pnpm 12.16 , Remix 3.1 , axios 1.21 , Deno 2.9.8 📖 Articles and Videos Parser Combinators in TypeScript, Built From Scratch — Parser combinators sit between regexes and heavyweight tools like tree-sitter. This animated, step-by-step walkthrough shows the basic elements of building them, concluding in an example turning ping output into typed objects. Florian Schindler Dead Code Shouldn't Exist: How Sentry Cut 28,000 Lines — A talk Dominik has given at six conferences this year, now as swipeable slides with a full transcript. He covers how unused code can cost more than you might think, and how Sentry used Knip to remove 28,000 lines. Dominik Dorfmeister (Sentry) AI.js Day 2026: Frontend's Scariest AI Questions, Live on Channel 13, Nov 13 — No hype, just the AI questions frontend devs are afraid to ask. Save your spot . JetBrains sponsor Building an Isolated Preview for AI-Generated HTML — Rendering model-written HTML in a srcdoc iframe runs it on your own origin. A security engineer breaks the naive approach, then rebuilds it using sandbox and a strict CSP, with demos showing what each one blocks. Keshav Malik A First Look at TypeScript 7.1's Content Mappers — TypeScript 7 ignores tsserver plugins, but 7.1's content mappers can turn non-TS files into TypeScript. Here's how they work, applied to CSS modules and .graphql files. Jovi De Croock 📄 How Engines Turn Dynamic Objects Into Fast Field Access – Shapes and inline caches, explained with runnable sketches. Max Bernstein 📄 Software is Slow Because of Bad Design, Not Slow Languages Sean Goedecke (GitHub) 🛠 Code & Tools Structs: TC39's Shared Structs Proposal, But Usable Today — A former TC39 delegate's implementation of the Stage 2 structs proposal . The idea is you get shared memory between workers, so threads can work on the same objects instead of serializing copies back and forth. There's a playground too. Erik Arvidsson Introducing TanStack Redact: A Slimmer React Runtime — A build plugin swaps React and React DOM for a smaller reimplementation in the browser with no code changes. It works with Vite, Start, Vinext and Next.js, and while TanStack reports 20-70% smaller client builds, rendering is synchronous only . Tanner Linsley (TanStack) AI Tests That Catch Real Bugs — AI can write low-value tests that pass without checking much. Wallaby helps your agent refine assertions and catch bugs. Wallaby Team sponsor Verdaccio 7.0: The Self-Hosted npm Registry Adds Staged Publishing and 2FA — A mature, lightweight way to self-host your own npm registry and proxy. v7 adds experimental staged publishing (where new versions need approval before going live) and 2FA, plus stricter ownership checks. Verdaccio Team Biome 2.6 Adds Markdown, YAML and SCSS Support — The Rust-powered alternative to Prettier and ESLint adds formatting support for Markdown, YAML and SCSS, along with initial linting support. JavaScript plugins for custom lint rules are available as a developer preview. Biome Core Team ☕ CoffeeScript 2.7.1 – The first release in four and a half years brings Node 22+ fixes and with { type: 'json' } import attributes. 💡 If you never used CoffeeScript , it is/was a Ruby- and Python-flavored language that compiled to JavaScript. Brendan Eich held up its arrow functions and lightweight classes as models for what went into ES6 (ES2015). oxlint 1.89 – The Rust-based linter now counts the upstream recommended rules of its React, Vue, Next.js, Jest/Vitest, and other plugins as 'recommended' so expect more reports if you upgrade. Mutative 2.0 – Immer-style efficient immutable updates library. The author reports a 3.6x speedup over Immer across a benchmark suite. SonicJS 3.0 – Headless CMS for Cloudflare Workers, built on Hono. v3 rebuilds the data layer, auth and plugin system. Homepage . query-string 10.0 – Parse and stringify URL query strings. Now throws for values it can't represent . ShareDB 7.0 – Realtime database backend based on operational transformation. 📰 Classifieds 📱 Expo is mobile AI infrastructure . Your agent writes the code, and Expo gets your iOS and Android app built and into the stores. Try it . 🧩 CAPTCHAs can frustrate real users and cost you conversions. Try Fingerprint’s bot detection for free and stop abuse without the friction. 📢 Elsewhere in the ecosystem 🔒 Node2Shell: ELLIO now reports exploit traffic in the wild for the Brotli RCE fixed in the Node releases (as mentioned earlier). The flaw is in Google's Brotli library, so bundled copies elsewhere need patching too . Sentry has given $1m to open source maintainers this year . JavaScript recipients include pnpm, TanStack, MSW, Knip and three Three.js maintainers, plus the OpenJS Foundation. 🎉 CSS-Tricks, the popular web dev resource, is independent again , now owned by longtime editor Geoff Graham. Arc, the design-led Chromium browser popular with developers, is being sunset with The Browser Company steering everyone to Dia . 📄 Google Docs can now open, edit and collaborate on Markdown files natively and Drive renders previews of them too.

See everything from the last 30 days →