If you ran pip-audit on Thursday, got a clean report and moved on, run it again. CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder. Aikido's headline now calls it HTTP2Shell; the rest of the internet mostly knew it as Node2Shell. It has a CVSS v4 score of 9.2 and affects Brotli 1.0.3 through 1.2.0. As of October 23,
You need a type-safe, low-bundle ORM for a Next.js app and want to get Drizzle wired up without hunting for scattered docs.
npm install drizzle-orm postgres
npm install -D drizzle-kit
Water System Guide (https://watersystemguide.com/) publishes a page of US hard water and drinking water statistics. We also released the numbers as an open dataset: 160 rows, one statistic per row, CC BY 4.0 for the compilation (DOI 10.5281/zenodo.235...
If you're registering a Google Play Console account as an organization, you'll hit a step that surprises most developers: the duns number google play requirement. Google requires every organization account to verify its legal business identity with a D-U-N-S number before the account is approved. Get it wrong — or start it too late — and your launch slips by weeks. Here's every...
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady.
I was about to tell someone "just swap the DSN" when I realized I couldn't say what the DSN actually receives. So I put a tap behind the DSN of a small Express app and sent it 100 requests. The SDK shipped 546 KB, and the one error event in there was 7.6 KB of it.
Last week I pointed the official SDK at a 36-line homemade ingest to see what breaks. This week is the other half of that qu...