Next.js Security Patches: Every CVE From September and What to Upgrade Before October 14
Next.js security update guide: the critical next/og RCE, image SSRF, cache poisoning CVEs, the safe versions (16.3.8, 15.5.27) and the October 14 patch.
Prompt Injection Is the New SQL Injection: Securing AI Features in Your Next.js App
Prompt injection explained with real 2026 attacks, the lethal trifecta, and 7 practical defenses for Next.js route handlers built with the Vercel AI SDK.
AGENTS.md: How I Make My Repos AI-Agent Friendly (Claude Code Now Reads It Too)
AGENTS.md explained: the one file Claude Code, Codex, Cursor and Copilot all read, what to put in it, and the CLAUDE.md gotcha that makes Claude skip it.
Shopify Left React Native for Swift and Kotlin. Should You Still Learn It?
Shopify is moving from React Native back to Swift and Kotlin because of AI coding tools. What happened, why, and whether React Native is still worth learning.
TypeScript 7 Is Here: The Go Compiler, 10x Faster Builds, and What Breaks
TypeScript 7 ships the Go-native compiler (Project Corsa): real 10x benchmarks, tsconfig changes that break builds, and why Astro, Vue and Svelte wait for 7.1.
package.json vs package-lock.json: What Each File Does (and Why Your Lockfile Matters More Than Ever)
package.json vs package-lock.json explained: caret vs tilde, npm ci vs npm install, committing the lockfile, merge conflicts, and lockfile security.
May 2025: SaaS Lessons, Gaming Wins, and Building a Smarter Future
My May 2025 recap: realigning priorities, shipping SaaS features, and the lessons I pulled from both the wins and the losses of the month.
Build a Custom Rate Limiter in Next.js and Keep Your APIs Rock-Solid
Build a rate limiter for Next.js API routes without a library, customise the time window, and learn why in-memory limits fail on Vercel and Redis fixes it.
April 2025: From Side-Hustle Revival to Big Wins
My April 2025 recap as a full stack developer: reviving side projects, landing new clients, and finally building the momentum I had chased for months.
Speed Up Your APIs with Gzip: A Next.js Example
Speed up Next.js APIs with gzip: compress API route responses, real payload benchmarks, pros and cons, common mistakes, and the BREACH security caveat.
March 2025: From My Worst to Best Month Yet
My March 2025 recap: how I turned a month that started badly into my best yet, shipped two projects, and rebuilt my daily routine from scratch.
Await Promise.all vs Async/Await: Use Cases, Pros, and Cons
Promise.all vs async/await in JavaScript: why sequential awaits slow your code, when to run promises in parallel, and when plain await is still the right call.
February 2025 Recap: A Failed Month for Me
My February 2025 recap: an honest look at a month where nothing went to plan, why I shipped nothing at all, and the lessons I took into March.
Make VS Code Unique with Color Customization
Customize VS Code colors with the Peacock extension: give every workspace its own color, create custom colors, and reset to defaults in seconds.
January 2025 Recap: Teaching, YouTube Goals, and SaaS Restart
My January 2025 recap: restarting my SaaS product, setting YouTube goals, and coaching my first batch of students as a full stack developer.
Looking Back, Moving Forward: My 2024 Recap and 2025 Goals
My 2024 year in review as a full stack developer: everything I built, shipped and learned, plus the goals and roadmap I set for 2025.
How to Properly Add Favicons in Next.js 14
Add favicons in Next.js the right way: generate every icon size from one 512x512 logo, put them in public, and wire them up in the App Router metadata.
How to Track Your App Usage Effectively on PC
Track app usage on your PC with Digital Wellbeing: see exactly how much time every app takes each day, spot your distractions, and stay focused.
3 Web App Performance Optimization Techniques That Actually Work
Web app performance optimization that works: server-side rendering, lazy loading, and database indexing to cut load times and improve Core Web Vitals.
Tired of Using Inspect Element to Check Device Responsiveness?
Test responsive design on every device size at once with Responsively App, a free tool that beats toggling screen sizes in Chrome DevTools.
API Routes vs Server Actions in Next.js 14: Choosing the Right Approach
API Routes vs Server Actions in Next.js: a feature-by-feature comparison of security, caching, data fetching and deployment, and when to use each one.
Exploring Google Chrome's New Features: Google Lens and Gemini Chat
How to use Google Lens and chat with Gemini right from the Chrome address bar, a hands-on look at Chrome's new AI features for everyday browsing.
How to Easily Extract Hex Codes from Any Website
Extract exact hex color codes from any website in one click with ColorZilla, the free color picker extension, and skip digging through DevTools.
How to Discover What Technologies a Website Is Using in One Click
Find out what technologies any website uses in one click with Wappalyzer: frameworks, CMS, analytics, CDNs and hosting, right from your browser.
How to Post Tweets to the Twitter API Using Next.js in 2 Easy Steps
Post tweets from a Next.js app with the X (Twitter) API in 2 easy steps: set up the twitter-api-v2 library, grab your API keys, and tweet from an API route.
You've read everything.