security
Enkryptify: field notes on a solo dev's secrets manager
Honest notes on Enkryptify, an EU-based secrets manager that injects your .env at runtime. What I liked, how the encryption actually works, and the lock-in I'd weigh.
Engineering the open web.
Long-form writing on Drupal, PHP frameworks, AI tooling, automated testing and everything else in a working programmer's stack — shipped from production, not theory.
Featured
Latest
RSS
ai
Open Design: your coding agent as a design engine
A local-first, Apache-2.0 app that turns Claude Code, Cursor and 20+ other CLIs into a design tool. What it actually does, and the honest caveats.
security
Keygraph and Shannon: an AI pentester that runs real exploits
Field notes on Keygraph's Shannon: an open-source, white-box AI pentester that reads your source and actually exploits the bugs it finds. What works, what to fear.
ai
An honest look at CodeRabbit, from someone who reviews real MRs
A Drupal dev tries AI pull-request review: what CodeRabbit does well, why it gets noisy, the pricing, and whether it belongs on your merge requests.
ai
Paperclip: the app that wants to run a company on AI agents
Field notes on paperclipai/paperclip, an open-source Node/React orchestrator for teams of AI agents. What it does, how it runs, and where the 'zero-human company' pitch cracks.
video
Making real MP4s with React: a PHP dev pokes at Remotion
A Drupal dev's field notes on Remotion, the React framework that renders real MP4s from components, where it's genuinely useful, and its unusual source-available licence.
ai
Hermes Desktop: a GUI bolted onto a CLI AI agent
Field notes on fathah/hermes-desktop, an Electron front-end for the Hermes Agent. What it does, the tech stack, and the caveats before you install it.
One email a week. No noise.
Every new article, plus the tools and patches I’m watching.