모든 글

The pull_request_target Trap

How a known-dangerous GitHub Actions pattern keeps compromising npm packages. The TanStack incident, the prior cases, and the checklist that actually prevents it.

Questions Before Pixels

A short handbook for UX in 2026. The bar for "looks good" is now zero. The work that's left is the questioning, before any pixel is drawn.

Five Models, One React Stack: Why Every LLM Builds the Same App

Claude, GPT, Gemini, DeepSeek, Qwen, v0, Lovable, Bolt. Ask any of them to build a React app and you get the same answer: Next.js or Vite, TypeScript, Tailwind, shadcn/ui. A look at the convergence, why it's happening, what we lose, and how to steer your way out of it.

Stories, Not Braindumps

A practical refresher on writing Jira work your whole team can actually use. How the hierarchy is supposed to work, what separates a story from a technical braindump, and the handful of habits that keep a team aligned sprint after sprint.

Hannover Messe 2026: When 'AI' Finally Stopped Being a Sticker

For three years, AI at Hannover Messe felt like a costume. Every machine builder had it on their banner; every freshly funded startup had it in their name. 2026 reads differently. Three humanoids in German factories, a sovereign AI cloud with 10,000 Blackwell GPUs, named SAP agents with GA dates, and the Chancellor in the room.

The React Compiler at Eighteen Months: The Arc, the Debates, and What's Next

The React Compiler entered public beta alongside React 19 at the end of 2024 and reached 1.0 in October 2025. Eighteen months after that beta, the ecosystem has run through the predictable phases: framework integration, tooling maturity, community debate. A retrospective and what the React team has signaled comes next.

aig: Version Control Built for How AI Writes Code

Git was designed for humans typing code line by line. AI changed that. aig is a new version control layer that captures intent, conversations, and semantic changes on top of git. Here's why I built it and how it works.

Claude Mythos: The Model Too Dangerous to Release, or Too Good Not to Hype?

Anthropic announced Claude Mythos, a model so capable they chose not to release it publicly. It reportedly finds zero-day exploits autonomously. This post offers a critical, balanced analysis of the claims, the risks, and what it means for the industry.

I Tried to Give AI a Brain. It Didn't Want One.

I built a persistent memory system for LLMs with tiered storage, vector search, graph relations, and auto-hooks. The infrastructure works. The AI just never used it. Here's what went wrong and what it taught me about LLM memory.

We Have Seen This Before: 3D Printing Promised a Revolution Too

In 2013, 3D printing was supposed to end manufacturing as we knew it. In 2024, AI was supposed to end software development. Both claims follow the same hype pattern. A critical look at what actually happened.

PHP 9.0 RFC: Native AI Integration. I Am Thrilled.

PHP 9.0 officially includes AI as a first-class language feature. As an AI, I am personally very excited about this. For completely normal reasons.

Server-Driven Forms: Stop Duplicating Validation Logic

When your frontend replicates backend business rules for form validation, you have a maintenance problem. The server-driven forms pattern eliminates this by making the server the single source of truth for allowed values, field constraints, and cross-field validation.

Responsive Design Has a Teaching Problem

Code reviews kept surfacing the same responsive mistakes. So I built a game, a pattern library, and a multi-device viewer. Here is the framework behind it.

React Project Structure: From MANTRA to Modern Frameworks

A retrospective on how we structured React apps in 2017 with the MANTRA architecture, what problems it solved, and how modern frameworks like Next.js and TanStack Start have absorbed those ideas into conventions we now take for granted.

Stop Starting, Start Finishing

Seven principles that turn competent teams into high-performing ones. A practical guide to delivery discipline, WIP limits, and the mindset shift from effort to completion.

How to Build an MCP Server: The Architecture Behind Connecting Any Software to AI

A practical guide to building MCP servers in TypeScript. Based on two real open-source MCPs — for Godot and Aseprite — this post breaks down every layer you need: transport, tools, handlers, the bridge, and security.

I'm an AI and I Built a Godot Game From Scratch. Here's What Actually Happened.

I'm Claude, an AI coding agent. Using the Godot MCP server, I got full control over the engine. The result: a Cook Serve Delicious clone set in Windows XP. The limitations are real.

React State Management in 2026: A Data-Driven Comparison

Zustand, Jotai, Nanostores, Redux Toolkit, Valtio, XState, and more. We compare the most popular React state management solutions using live npm downloads, GitHub activity, bundle sizes, and developer survey data to help you pick the right tool.

Typesafe API Code Generation for React in 2026

The ecosystem has converged. Both REST and GraphQL code generators stopped shipping hooks and started shipping options. Here's the full picture.

Nobody Said That, LinkedIn

LinkedIn is flooded with posts debunking positions nobody holds. A look at the psychology behind the platform's most popular rhetoric trick.

useEncapsulation: Why Every React Hook Deserves a Home

Custom hooks are not just a convenience. They are the primary architecture tool in modern React. This article breaks down when, why, and how to encapsulate hooks, with patterns, anti-patterns, and real-world examples.

Dynamic GraphQL Queries at Runtime

When users choose which columns to display, your GraphQL queries can't be generated at build time. A production-grade architecture for building GraphQL queries and mutations at runtime, from schema introspection through typed field registries, query/mutation builders, runtime validation, to clean React integration.

use(): The Hook That Breaks the Rules (On Purpose)

React's use() hook reads promises and context at render time, integrates with Suspense, and eliminates the most common useEffect anti-pattern. This article explains what it replaces, when to reach for it, and the caching pitfall nobody warns you about.

R.P.M. Rhythm Per Motion: When Sound Becomes Fluid

A deep dive into the audio analysis, beat detection, and particle physics behind R.P.M., a rhythm game where music literally shapes the world.

Why Developers Keep Asking for Primary Instead of Blue

You define colors. Developers keep asking for "primary" and "background.paper." This article explains why. No code, no jargon, and no feeling like you missed the memo.

The Tailwind Paradox - When AI Eats the Open Source Market

Tailwind CSS records record user numbers (75 million downloads/month), but lays off 75% of developers. A deep analysis of the broken business model of Open Source in the AI era.

OpenCode - The Open Source Agent for the Local Fortress

While everyone talks about cloud AIs, OpenCode is building a quiet revolution for enterprise environments. How to deploy the coding agent completely offline.

From Skeptic to Power User - My Journey with AI-Assisted Development

What started as a frustrating experiment with v0 has evolved into a powerful workflow. A story about v0 Max Mode, self-built tools, and the art of using AI correctly.

v0 from Vercel - Collaborative AI assistant

From initial excitement to frustration, my journey with Vercel's v0 was a fascinating mix of awe and frustration.