A collection of articles published in 2026, capturing key ideas, experiments, and lessons from that period.
A red test simply indicates a disagreement, not a final decision. It's important to understand whether a failing test points to an actual bug, a temporary hiccup, or reveals a contract that hasn't been written yet.
Read full dispatch
Here's a helpful summary of the EU AI Act for mid-2026: it outlines which bans and GPAI rules are already in place, details the fines involved, and explains why the high-risk deadlines are now pushed to 2027 and 2028.
Read full dispatch
A CSP nonce is like a special agreement for rendering, not just a header change. It involves costs for static generation and CDN caching, highlights what it might still miss, and shows how to implement it safely.
Read full dispatch
Exploring the axios npm supply chain attack reveals a concerning story: a fake startup founder, a hijacked maintainer account, malware hidden in a popular JavaScript library, and a challenging 3-hour cleanup. It highlights the importance of vigilance in the open-source community.
Read full dispatch