Thoughts on AI, the tech stack, and the indie hacker journey.
Next.js 16.3 turned on a persistent build cache by default, and Vercel's benchmark page has three numbers, not one. Here's which one applies to you, and the two-line CI check that decides if you get any of them.
Cloudflare's vinext project reimplements 94% of the Next.js API surface, deploys straight to Cloudflare Workers, and cost about $1,100 in AI tokens to build. Here's what the missing 6% means for solo builders deciding what to build themselves.
CVE-2026-63030 (wp2shell) is a pre-auth RCE in WordPress core itself: no login, no vulnerable plugin, just a stock install and a REST API request.
Astro 7.3 landed September 3, 2026, with a same-week 7.3.1 patch. This site runs Astro 5.18.1, two majors behind, on a build that is all-or-nothing across 607 posts. I ran the actual math before touching package.json.
Broadcom posted record AI chip revenue on September 2, 2026, and the stock dropped anyway: what a muted market reaction to a blowout quarter means for anyone building on top of API pricing.
Debian ran an eight-way vote on generative AI and the winning option fits in one governing sentence: use whatever tool you want, you still own what you submit. Most solo maintainers don't have that sentence written down anywhere, and here's the CONTRIBUTING.md language to fix that today.
Gemini 3.8 Flash Cyber scores 86.2% on the CyberGym benchmark, but Google's Fairwind Program only accepts governments, critical infrastructure operators, and platforms with millions of downstream users.
OpenAI launched Astra to enterprise Daybreak customers first and made Plus, Pro, and Business subscribers wait. Altman apologized and offered banked resets. Here's what that means for anyone who builds client work on top of ChatGPT.
A widely discussed Hacker News post argues that AI-handled incidents are eroding the pattern-matching skill engineers need for the rare outage automation can't fix. For a solo operator, there's no senior engineer standing by when that happens.