Thoughts on AI, the tech stack, and the indie hacker journey.
Attackers published lightning 2.6.2 and 2.6.3 to PyPI on April 30 with a hidden JavaScript payload that steals credentials and — if it finds an npm publish token — wraps every package that token can publish to. Cross-ecosystem propagation is the new shape of supply chain. Here's what to actually check this weekend.
Stripe Projects went GA at Sessions 2026 — provision, manage, and bill 32 partner services (Vercel, Supabase, Clerk, Cloudflare, Render, Sentry, Twilio, Hugging Face) from inside Stripe with one invoice. Plus Stripe Console, an agentic dashboard. I spent an evening with it. Here's the honest read.
A 293-day internet scan found 1M exposed AI services across 2M hosts. 175,000 Ollama servers in 130 countries. 31% answered anonymous queries with a model loaded. 518 were anonymously proxying paid frontier APIs. If you self-host any LLM, read this before Saturday.
Anthropic released 10 vertical agents for banks and insurers, embedded directly in Excel and PowerPoint. The headlines call it a Wall Street push. The bigger story is that frontier labs just made pre-built vertical agents the new product line, and your custom Claude tool just got priced out.
Anthropic plus Blackstone, Hellman & Friedman, Goldman, and a consortium of PE firms put $1.5B behind a services company that embeds engineers inside mid-market companies to integrate Claude. The customer pipeline is built into the cap table. Here's the honest 18-month read for indie AI consultants.
Cerebras priced its IPO at $115-$125 per share, raising up to $3.5B at a $26.6B market cap, and the book is reportedly 3x oversubscribed. The first real public test of the post-NVIDIA AI chip market matters for indie operators on an 18-month lag — here's the mechanism.
The $1.5B Anthropic services JV with Goldman and Blackstone isn't an abstract threat to indie consultants. It has named customers, named dollars, and a named timeline. I mapped 8 indie consultants from my network to the threat: three are safe, three are at high risk, two are in the worst position. Here's the actual 12-month repositioning plan.
Microsoft shipped a $15/user/month control plane for AI agents and bundled it into a $99 enterprise SKU. Every B2B sales call you take in the next year will reference it. Here's the indie read.
Cloudflare acquired Astro in January. The framework I run this blog on is now stewarded by a deployment platform. Here's the 90-day check-in: what changed, what didn't, and the one watch-item that decides whether the framework stays good for solo devs.