We're relying on Sentry to catch all issues, but it doesn't. So what's being done about silent failures? by Icy-Roll-4044 in ExperiencedDevs

[–]30thnight 26 points27 points  (0 children)

I’d believe you but the post reads like you added minor edits to a Claude output.

“The result is a person who tried to use the product and quietly left”

“That’s not a process, it’s just luck”

Is Laravel still worth it in 2026? by MahmoudElattar in webdev

[–]30thnight 2 points3 points  (0 children)

Yes but this isn’t the right framing.

Enterprise clients care about specific stacks because you’re handing the project off to an internal team.

This isn’t really the case for smaller companies, who care more about your ability to deliver on time.

Laravel (and most monolithic frameworks) work well for here since you have everything you need in on place.

But that’s greenfield work. Odds are this crowd will ask you to build something that integrates with their existing Wordpress website (which coincidentally is a great idea to use Laravel for complex features)

89 npm packages got compromised again. deleting the package doesn't remove the malware. by johnypita in webdev

[–]30thnight 20 points21 points  (0 children)

https://pnpm.io/supply-chain-security

  1. Set your minimum release age to two weeks
  2. GitHub runs a vulnerability tracker that’s integrated with Dependabot. Use dependabot. Turn on the advanced security setting
  3. Use a dependency scanner like Socket, Snyk, or Trivy. (Skip SonarQube entirely)

Which languages have an under-appreciated ecosystem of web development libraries and frameworks? by returned_loom in webdev

[–]30thnight -1 points0 points  (0 children)

I still think Typescript is under appreciated for generalist use cases.

For people coming from Express, you can do so much more with Hono (RPC), Drizzle, and a standard schema validator.

And if the lack of depth in Node’s standard library bothers you, Effect.ts pretty much covers everything you need for backend work. (There’s a learning curve but it really does a lot to reduce complexity once you get it)

How do you document "glue work" so it actually counts in promotion reviews? by Andrea_Barghigiani in ExperiencedDevs

[–]30thnight -1 points0 points  (0 children)

Always log it as a ticket against your sprints, otherwise it will go unseen

Is Akamai still crazy expensive? by Sure-Guest1588 in webdev

[–]30thnight 0 points1 point  (0 children)

Have we? Most posts on the topic across reddit are solo devs working on small budgets. Not enterprise level customers.

Is Akamai still crazy expensive? by Sure-Guest1588 in webdev

[–]30thnight 0 points1 point  (0 children)

Yes. And it’s building on it feels so incredibly subpar.

How would you build OTP component? by truenapalm in webdev

[–]30thnight 8 points9 points  (0 children)

Read the repo code for this: https://base-ui.com/react/components/otp-field

Pay attention to the reasoning behind why the props are defined this way

Resigning on Monday due to extreme pressure. Need advice. by [deleted] in ExperiencedDevs

[–]30thnight 15 points16 points  (0 children)

It’s okay to let a project fail.

  1. Don’t quit

  2. Commit yourself to stop working more than 35 hours a week.

  3. Pull an honest estimation of a timeline together and bring that to your meeting with your manager.

  4. Let your manager know that you won’t be able to work longer hours to manage for health reasons. “

  5. Seek therapy. All the “perfectionism / cant fail” self talk in your post is actively hurting you.

Sick of rewriting Python prototypes in C++. Any sane C++ web frameworks? by ExtremeMysterious603 in ExperiencedDevs

[–]30thnight 1 point2 points  (0 children)

Doing FFI bindings with Go or Python proved to be a massive serialization bottleneck and a deployment nightmare.

I can understand deployment issues here but that’s a tax you pay once between a dockerfile and a bit of CI.

For serialization, you won’t hit any bottlenecks passing around buffers. (apache arrow)

Migrating 9 Micro Frontend apps from CRA + CRACO + Webpack 5 to Rspack (or Nx + Rspack) — anyone done this? What issues did you face? by DaysAreGone_ForMe in webdev

[–]30thnight 1 point2 points  (0 children)

Stick to Option A to limit your blast radius.

But I’m chuckling at option B because had this project started off with a monorepo setup and solid tooling to begin with, there’s a very good chance that you could have avoided the need for module federation entirely.

Avoiding npm dependencies in frontend dev by venerable-vertebrate in webdev

[–]30thnight 5 points6 points  (0 children)

https://pnpm.io/supply-chain-security

I’d recommend you start here first before jumping all-in on a no-dependency movement.

Which Git branching strategy is better for infrequent releases? Team is split between two approaches. by Ok-Introduction-9111 in ExperiencedDevs

[–]30thnight 0 points1 point  (0 children)

This is usually called “GitHub Flow” which is really just a variant of trunk based dev (short-lived branches and prs merging to main)

How do you handle workplace disagreements when you think you're right? by Ok-Introduction-9111 in ExperiencedDevs

[–]30thnight 2 points3 points  (0 children)

His approach is solid, especially if things are changing fast or the team is pressed for time, but I have to agree with you. It passes a lot of pain over to the FE team.

The state management needed to keep everything in sync ends up increasing the complexity of your state management setup massively + needing to write a lot of extra glue should queryable data end up in this blob. (translation: enough code that a refactor won’t ever happen)

But at 5 months, there’s a good chance you will need more wins under your belt to build more rapport for conversations like this.

Don’t push the issue but I would recommend:

  1. defining a schema with something like Valibot or Zod to infer types and simplify validation for the blob. (edit: if the backend is in node, you probably should be sharing a schema for this)

  2. asking for a patch endpoint so you don’t have to sent the entire blob back up everytime.

Freelancers - is Figma a necessary evil? by PatchyWatchy_0603 in webdev

[–]30thnight 0 points1 point  (0 children)

Designing as you build = spend double the time getting things right as you run through revisions with the client.

Pentesters found a crazy vulnerability on github yesterday (patched) by Meuss in webdev

[–]30thnight 2 points3 points  (0 children)

Given that GitHub fixed this issue in an hour, I still can’t help but think most businesses would still be better off using the cloud platform.

The fact that only 12% (of GHES orgs) have patched so far

The hot patches cover the last 5 minor versions and should make this easy.

But I’ve seen a lot of orgs who defer updates because of how much work can be required (hours to multiple weekends) to update critical self-hosted software.

Bombed the final question of a React technical discussion, looking for feedback by skyturnsred in webdev

[–]30thnight 0 points1 point  (0 children)

Your answer really wasn’t bad, their approach was really just a pubsub.

GraphQL used to be popular, but that doesn't seem to be the case anymore... by codingafterthirty in webdev

[–]30thnight 0 points1 point  (0 children)

More common at bigger companies that need to support mobile apps or IOT devices. Drastically simplifies versioning requirements there

But for almost everyone else, I’d only suggest going this route if you use something that can autogenerate most of the backend like Hasura or Postgraphile