“Tokenmaxxing as a business strategy was like heating your convenience store by lighting the cash in the register on fire.” - Ben Affleck ~~ He’s showing more rational business sense than half the CEOs in tech.
Adrian Fâciu
@adrianfaciu.dev
Principal software engineer. Focused on front-end. Learning something new each day. Building things at WeVideo. adrianfaciu.dev
Enterprise software companies had a short-lived run where they competed on usability and product-led growth which seems to be over. Now every SaaS app seems to be converging on the same UX monstrosity, complete with AI features of dubious value.
new version of the @e18e.dev ESLint plugin 🚀 This works with both ESLint and oxlint to detect code which can be modernised or made more performant. Combine it with knip for good times!
GitHub - e18e/eslint-plugin: The official e18e ESLint plugin for code modernization and performance best practices
The official e18e ESLint plugin for code modernization and performance best practices - e18e/eslint-plugin
github.com
We have been working on the OWASP MCP Security Taxonomy - an open, vendor-neutral framework designed to create a common language for MCP security risks, weaknesses, attack patterns, controls, detections, and test cases: github.com/OWASP/MCP-Ta... Go check it out and give feedback
GitHub - OWASP/MCP-Taxonomy: OWASP MCP Taxonomy
OWASP MCP Taxonomy. Contribute to OWASP/MCP-Taxonomy development by creating an account on GitHub.
github.com
Get more out of GPT-6 Astra by revisiting your skills, AGENTS.md, and task prompts. Make skill triggers specific, load guidance when it's relevant, and define what done looks like. https://developers.openai.com/blog/rethinking-skills-and-prompts-for-gpt-6-astra
Rethinking skills and prompts for GPT-6 Astra | OpenAI Developers
Revisit skill descriptions, AGENTS.md, and task prompts to avoid bloated context.
developers.openai.com
📢 I'm officially looking for a new job. You hiring? Full time, remote from Spain, paid via EOR, IC, TypeScript, no crypto, support for 3-4 conference speaking gigs/year. Share plz. 🙏 DMs open.
Frontend Managers: code you send over the wire that your team is not comfortable patching and/or forking manages your team, not the other way around. You cannot "save money" through dependence, only blot balance sheet black holes of unknown gravitational pull.
AI is creating an obsessive workaholic mentality in tech due to two related dynamics 1. Getting stuff done with tools like Claude Code creates a dopamine hit of feeling productive. It’s like TikTok but for work. 2. AI is “the next big thing” and everyone feels FOMO. Combined it leads to overwork
🔥 Hot Repo！ 🔥 (100+ new stars) 📦 withastro / flue ⭐ 5,337 (+164) 🗒 TypeScript The sandbox agent framework.
GitHub - withastro/flue: The sandbox agent framework.
The sandbox agent framework. Contribute to withastro/flue development by creating an account on GitHub.
github.com
Mermaid diagrams are now built directly into VS Code. 🎉 No extra extension required. 🙌
Writing is and will remain a relevant skill for our careers
Writing Framework
My 3-step framework for clearer writing, tested on my teams over the years.
open.substack.com
VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. Vite stays open source, vendor-agnostic, and built for everyone. https://cfl.re/4dR0LYA
VoidZero is joining Cloudflare
VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. Vite stays open source, vendor-agnostic, and built for everyone.
blog.cloudflare.com
Interesting read on how Cloudflare built a multi model code reviewer
Orchestrating AI Code Review at scale
Learn about how we built a CI-native AI code reviewer using OpenCode that helps our engineers ship better, safer code.
blog.cloudflare.com
Missed tim.js last night? Recordings are up 🎥 Beyond the UI: Web Applications in the Age of Agents Adrian Faciu at tim.js #107 What if web apps became toolkits that agents can use on behalf of users? Watch here 👉 youtu.be/5ykc-ATs6lg?...
tim.js meetup 107: Beyond the UI: Web Applications in the Age of Agents, by Adrian Fâciu
We've all added some AI to our applications. A summarize button here, a transcribe button there — pockets of functionality, glued onto the existing UI. But the next step is different. What if our…
youtu.be
Missed tim.js last night? Recordings are up 🎥 AI made me better. Faster. Exhausted. Anca Spatariu at tim.js #107 A fun, honest look at the strange new life of a dev in the AI era: prompt spirals, tool fatigue, heavier reviews, and staying human in the loop. Watch here 👉 youtu.be/-UepPM9WC_Q?...
tim.js meetup 107: AI made me better. Faster. Exhausted., by Anca Spǎtariu
AI can write code, explain errors, generate tests, and confidently suggest the wrong abstraction in seconds. Amazing. Exhausting. This talk is a fun, honest look at development in the AI era:…
youtu.be
Codex anywhere and everywhere, all the time. Now your Mac doesn’t have to be unlocked for Codex to use your computer. From your phone, Codex can securely use apps on your Mac, even when the screen is off and locked. https://developers.openai.com/codex/app/computer-use#locked-use
🛠️ Ultimately, WebMCP is about making a more secure agent pathway instead of scraping DOM and a11y trees. I made a small site to demo how it works, how agents use it, what the spec looks like, and some important links. It's interactive! You can use the extension to actuate the page:
Heartbreaking. And a wake-up call. It is no longer about being difficult to find a way to sustain yourself through your work online. It is no longer sustainable to keep a website up now. Axel has done so much for the web and all of us. Buy one of his books if you can. We've learned so much from him.
Axel Rauschmayer (also on 🦣)@dr-axel.de · 5mo ago1/ I’m still processing what’s going on in tech at the moment. I used to feel at home in that world. It used to feel incredibly creative and positive. Now it’s increasingly full of bugs, dark addicting patterns and AI slop. 2ality.com
See you all there 🚀
tim.js@timjs.ro · 5mo agoReady for a new tim.js edition? Our 107th meetup comes with a strong AI flavor, and we’re excited to see you on May 27th! On the agenda: 🎤 Beyond the UI: Web Applications in the Age of Agents by Adrian Faciu 🎤 AI made me better. Faster. Exhausted. by Anca Spatariu 👉 luma.com/p9e0pv9o
tanstack.com/blog/npm-sup... Just published our postmortem
Postmortem: TanStack npm supply-chain compromise | TanStack Blog
On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 mal...
tanstack.com
84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...
Tanstack npm Packages Compromised in Ongoing Mini Shai-Hulud...
Socket detected 84 compromised TanStack npm packages modified with suspected CI credential-stealing malware.
socket.dev
I'll be a keynote speaker at Craft Conference on 4 June, in Budapest, Hungary. It's one of my favorite conferences, and the speaker lineup simply stellar. @kentbeck.com and many others will be there. If you'll be there: catch you at the event! Details + tickets: craft-conf.com/2026
🚀Rolldown 1.0 is here!🚀 Rust-based high-performance JavaScript bundler. 🏎️ Runs at native speed that’s up 30x faster than Rollup 🤝 Compatible with existing Rollup & Vite plugins ⚡The underlying bunder for Vite After 2 years, Rolldown is officially stable and has 20+M weekly downloads.
One or more person or persons may or may not have spoken, and in a voice funneled through a person whose professional success explicitly hinges on demand for this feature, cried out: “eight.” That’s web standards, baby! wil.to/posts/google...
Google’s Prompt API
No web standard should require you to agree to an advertising company’s “terms of use.”
wil.to
We are working on bulk suppressions support in oxlint! Next release will have CLI support and we are working on LSP support now.
Just realised I miss the time when I was reading code and could figure out which of my colleagues wrote it. We each have our own style and quirks. Now all code is the same, no personality, all AI 😅