SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Kimai is the #1 open-source time-tracking application. From freelancers to companies and organisations - everyone can manage timesheets, generate reports, create invoices and so much more... Web-based multi-user application, available as On-Premise or SaaS version: https://www.kimai.org
A self-hosted web radio management suite, including turnkey installer tools for the full radio software stack and a modern, easy-to-use web app to manage your stations.
TencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LLM-Wiki, Code-Graph) that are governed, shared, and equipped across agents and frameworks.
WordPress Develop, Git-ified. Synced from git://develop.git.wordpress.org/, including branches and tags! This repository is just a mirror of the WordPress subversion repository. Please include a link to a pre-existing ticket on https://core.trac.wordpress.org/ with every pull request.
Fast Rust library for PDF inspection, classification, and text extraction. Intelligently detects scanned vs text-based PDFs to enable smart routing decisions.
Run the full 2.78-trillion-parameter Kimi K3 model beyond available RAM by streaming activated weights directly from NVMe. A dependency-free, embeddable C inference engine.
An advanced guide which might benefit you a lot ๐ . ไบบ็่ฟ้ถๆๅ ็ฆป่ฐฑ็ไบบ็ ็ฆป่ฐฑ็่ฑ่ฏญๅญฆไน ๆๅ/่ฑ่ฏญๅญฆไน ๆ็จ/่ฑ่ฏญๅญฆไน /ๅญฆ่ฑ่ฏญ
Vibe-Research: Your Personal Trading Research Agent · A่ก/็พ่ก/ๆธฏ่ก ็ไธชไบบๆ็ Agent๏ผๆฏๆฅๅค็ใ่ต่ฎฏ้ท่พพใไธช่กๆฐๆฎใๆฟๅไธญๅฟใๆ็ๆไปใ็ ็ฉถ่ฎฐๅฝใVibe-Research ๆๆฐๆฎๅๅ่ฝ้ ้ฝ๏ผ็ฑไฝ ่ชๅทฑ็ AI ้ฉฑๅจๆ่ต็ ็ฉถใ
An open-source long-horizon SuperAgent harness that researches, codes, and creates. With the help of sandboxes, memories, tools, skill, subagents and message gateway, it handles different levels of tasks that could take minutes to hours.
Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.
โก Dynamically generated, customizable SVG that gives the appearance of typing and deleting text for use on your profile page, repositories, or website.
Open Source Point of Sale is a web based point of sale application written in PHP using CodeIgniter framework. It uses MySQL as the data back end and has a Bootstrap 3 based user interface. If you like this project, please give it a star! Doing so helps maintain Popular OSS status for the project.
A comprehensive dataset of 433 fitness exercises. Each entry includes name, category, target muscle group, equipment, instructions, thumbnail image, and animation video.
AI-powered job application framework built on Claude Code. Fork it, fill in your profile, and let Claude evaluate jobs, tailor CVs, write cover letters, and prepare you for interviews.
AI agentAI workflowWorkflow automationResume building
Practical reference and patterns for loop engineering, designing systems that prompt and orchestrate AI coding agents (inspired by Addy Osmani and Boris Cherny / Anthropic)
An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers.
๏ฃฟ This project is dedicated to collecting high-quality macOS software and organizing them systematically by different categories for easy search and use.
An end-to-end production workspace for AI-generated short dramas. From script input to structured storyboarding, consistency management, shot preparation, video generation, and export.
Wrap Antigravity, ChatGPT Codex, Claude Code, Grok Build as an OpenAI/Gemini/Claude/Codex compatible API service, allowing you to enjoy the free Gemini 3.1 Pro, GPT 5.5, Grok 4.3, Claude model through API
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.
Fill-in-your-own-data framework for YouTube / short-form video automation: CapCut JSON + ffmpeg tooling + an onboarding questionnaire. Ships with zero private data.
A library of Agent Skills designed to work with the Stitch MCP server. Each skill follows the Agent Skills open standard, for compatibility with coding agents such as Antigravity, Gemini CLI, Claude Code, Cursor.
A next.js web application that integrates AI capabilities with draw.io diagrams. This app allows you to create, modify, and enhance diagrams through natural language commands and AI-assisted visualization.
Empowering People Ethically ๐ — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub โญ๏ธ – Pull Requests welcome!
Prior to making any Submission(s), you must sign an Adobe Contributor License Agreement, available here at: https://opensource.adobe.com/cla.html. All Submissions you make to Adobe Inc. and its affiliates, assigns and subsidiaries (collectively “Adobe”) are subject to the terms of the Adobe Contributor License Agreement.
Security, performance, marketing, and design tools — Jetpack is made by WordPress experts to make WP sites safer and faster, and help you grow your traffic.
Most of the Laravel applications I work on expose REST APIs, and we've been trying to move more of our API testing into the terminal instead of relying on a GUI. The main goal is to use the same workflow locally and in CI/CD. We were looking for a tool that can: Run API tests fr…
It builds up quietly, it doesn't show on any board, and it comes due at the worst possible moment, usually when the technology the team never had time to learn becomes the technology the roadmap now depends on.The same note turns up in audit after audit. A team is building …
Yii DB Migration version 2.1.0 was released. In this version: Add MigrationBuilder::insertBatch() method, deprecate batchInsert() Explicitly import classes, functions, and constants in "use" section Remove unnecessary files from Composer package Remove confirmation prompt from m…
Helllllooooo! Happy August! I hope you had a great week. Mine was WILDLY busy at work, and this weekend was a welcome brain break. But now, break's over, let's learn! Was this forwarded to you? You can subscribe here! Web links of the week CodePen 2.0 React Debugging with Perfor…
Agentimus makes a WordPress site legible to AI assistants and lets them operate it over MCP. Until now it could only tell you what your site publishes. Version 1.33.0 turns the telescope around: it reads what Google, Bing and Cloudflare report back about you, and…
I added infrastructure discovery to my project boilerplate because generic scaffolding hides the services and failure modes that shape a real application.
I replaced our Queue/Horizon tier with a database-backed job engine; now stable, feedback welcome Background: I run a fairly large Queue/Horizon implementation (six-figure job counts, multi-host workers, nightly batch DAGs hundreds of jobs wide), and I kept hitting the same arch…
Hi I am pretty new at laravel and is quite impressed with the massive support in terms of tech stack and more. I am a business analyst with some little experience in coding, i have always been a wordpress person but really impressed with the creativity laravel brings. I am worki…
I've been working on Laravel API projects and recently started reviewing our API documentation workflow. Swagger/OpenAPI tools have been useful for generating documentation, but as projects grow, we're looking for a workflow that covers more than just documentation. Some things …
17 lock-wait timeout errors on production in under two hours, and user-facing operations are failing. The root cause turned out to be a single SELECT statement that was doing exactly what it was supposed to.This post is about how InnoDB's locking works beneath the surface, …
You wire up a new tool and you want Claude to work with it. Analytics, error monitoring, your deploy pipeline. So you go looking for an MCP server, or you find one and spend an afternoon running it, authenticating it, keeping it alive. And when there isn't one, you fall bac…
Part of the integration loop seriesAnalytics has a blind spot no dashboard can fix: it shows the events you added, never the ones you forgot. So you ship, wire up tracking, and weeks later open PostHog to answer a real question, only to find you're drowning in clicks you ne…
My colleagues have performed more than 180 technical due diligence audits over the past decade, and the people who get to read the report are mostly very enthusiastic after doing so. It's brutally honest, it gives a good objective opinion on what the current state of their …
I'm a back-end engineer. You give the back-end some inputs, it does some magic, and returns a result. Pure data, I get that. Don't get me wrong, the magic part can get pretty intense. Sometimes you find yourself in a dark forest left by previous developers, and if you …
Part of the Integration Loop seriesHere's a bug you can't reproduce. curl says the page loads in 200ms. Lighthouse gives you a green score. Every synthetic check is happy. And the people actually using the app keep telling you it's slow. You stare at the dashboard…
A sharp writeup on how a malicious site could trick Claude into exfiltrating memory-derived personal data through its web browsing flow. It walks through the attack chain, the prompt injection setup, and Anthropic's eventual mitigation. Read more
A practical conference session on building PHP extensions with Go and FrankenPHP, then wiring them into Laravel and Symfony as native-feeling features. It uses an in-memory LRU cache as the example and offers a nice tour of framework flexibility and PHP internals. Read more
There's a third way to automate Claude Code, and unlike /goal and /loop, it doesn't need your laptop open at all. Anthropic just shipped routines: cloud-hosted automations triggered by a schedule, an API call, or a GitHub event. Read more
A deep dive into PHP attributes, from metadata and Reflection to practical design patterns, Laravel examples, performance, testing, and the cases where explicit code is better. Read more
I found there wasn't any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper: https://www.usenix.org/conference/usenixsecurity24/presentation/wessels https://github.com/securized/laravel-ssrf Read more
A live, zoomable ER diagram of your Laravel app's actual database schema, safe to run in production because it only ever reads structure, never rows. Read more
Mattias walks through moving an AI coding setup off a laptop and onto a private VPS. He covers Tailscale, tmux, a browser-based editor, and the small tweaks that make a remote setup practical from any device. Read more
Steve King builds a real order fulfilment flow to show how a workflow engine handles long-running processes in Laravel. The post covers steps, signals, retries, branching, human approval, compensation, and the surrounding tooling in one practical example. Read more
Brendt shares fresh Packagist-based PHP version stats for July 2026: PHP 8.4 is now the most-used version, while PHP 8.5 reached 16% adoption after six months. He also notes that package minimum requirements still lag behind, with relatively few popular packages requiring a vers…
Back in 2009, I wanted to build a web-based strategy game. I had a vision of a sci-fi universe where players could colonize planets, extract resources, build fleets, and wage interstellar war.
Amelia Sordell built an agency on the back of her own personal brand, and this book is her attempt at sharing how she did it, and has since done the same for her clients. I came away with a handful of golden nuggets and some frustration over how deep I had to dig for them.
Software is for users. Building it requires observation, judgment, experimentation, and honest feedback—not a mandate to use a particular tool. I have been building software for more than 25 years. The technology stacks move around, but the job does not. We build tools to…
Generative AI means a massive disruption for the content business. The entire production process is being shaken up. Profiles, workflows, tools – everything is being redefined. As the cost of content production trends toward zero, two things gain massively in importance: Quality…
If you want generative AI to produce quality results, you need a solid content strategy and clear guidelines. Let's be honest: the gen-AI hype is a threat to my content business. We're seeing companies hold back investment in their content. Why? The capabilities of generative AI…
Lately React, Vue and Svelte have converged on similar concepts for building reactive interfaces. Their syntax differs, but every reactive frontend still uses some form of state, computed values, mutations and effects. Nevertheless, there is a lot of knowledge involved in gettin…
The cost of producing content is trending toward zero. But anyone working in branding and corporate communications knows the dilemma: Faster and more consistent: yes, please! Losing control over positioning: no, thanks. We revised our own content strategy — with the help of AI. …
Transcript [00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley. Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, the risks of legacy PHP…
Transcript [00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley. Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, why accessibility in Wo…
Transcript [00:00:19] Nathan Wrigley: Welcome to the Jukebox Podcast from WP Tavern. My name is Nathan Wrigley. Jukebox is a podcast which is dedicated to all things WordPress. The people, the events, the plugins, the blocks, the themes, and in this case, testing secure WordPres…
Our team of core developers works very hard to strengthen and improve the PHP language. In an effort to improve the way we communicate this work, from now on, we will be posting quarterly updates regarding their individual projects and efforts. Our core team consists of 13 peopl…
Friday Night Dinner: Buvette Friday, July 24th 2026, 17:10 BST 2 Neal's Yard, London, WC2H 9DP, United Kingdom https://buvette-london.com French Sharing Dishes: £12-£17; Wines from £45 Hidden away in Neal's Yard, there are a bunch of wine bars, a café, and a …
Friday Night Dinner: Co & Ko Friday, July 31st 2026, 16:45 BST 72 Berwick Street, London, W1F 8TD, United Kingdom https://www.cookandkorea.com/ Korean Starters: £5-£10.5; Dishes: £10.5-£25.5 Situated in SOHO, this small restaurant has a large selection of…
Every year, Tighten builds a puzzle for Laracon. We’ve run typing challenges, coding challenges, and, last year, an entire game-building challenge. It's a fun chance for us to build something for the community, give some prizes away, and flex some of our coding chops in a way we…
Blogstighten.comMatt Stauffer, Matt Stauffer 14d ago
I was a guest in Karol Skrzymowski’s podcast “Loosely Coupled”, together with Martin Fowler, Xin Yao, and Andrew Harmel-Law. It was recorded live at DDD Europe 2026 in Antwerp. Abstract Is design still relevant in the age of AI? Is AI capable of replacing domain experts, archite…
I recently read philosopher Gilbert Ryle’s book The Concept of Mind, as it was one of the books referenced by Peter Naur’s text Programming as Theory Building (which I wrote about here previously). I wanted to read it because I was interested in the background of Naur’s argument…
For the longest time, I’ve had a stack of old 3.5” floppy disks. At some point in the past years, I thought it would be fun to see what’s on them. But how do you do that on a modern PC? I hadn’t had an actual floppy drive for the longest time. There are two options: Get a USB fl…
One Source, Ten Surfaces Every Shopware shop hits the same wall eventually. You need rich text somewhere the core doesn’t give you a WYSIWYG – a category landing blurb, a brand story on the manufacturer, a formatted paragraph inside a shipping mail – and you’re left …
Yii Bulma version 1.1.0 was released. In this version: Bump yiisoft/html version to ^4.2.0 Adapt configuration to changes in yiisoft/form Change PHP constraint in composer.json to 8.1 - 8.5 Adopt last change yiisoft/widget Refactor yiisoft/html classes usage Explicitly import co…
Yii2 eCitizen Payment Extension ¶ What This Package Does What This Package Does Not Do Compatibility Installation Yii2 Configuration Environment Variables Yii2 MVC Pattern Basic Checkout Usage Callback URL Building Example Model: Payment Form Example Controller: Checkout Example…
Yii-Permission ¶ Installation Usage Define your own model.conf Learning Casbin License An authorization library for the Yii 3.0 PHP Framework, based on Casbin. Installation Getting Composer package Configuring application Database Migration Usage Quick start Using Enforcer Api U…
The most expensive part of a small feature request used to be writing the code. Now it’s usually the meeting about whether or not to write the code. That’s a real shift, and it quietly breaks a lot of engineering instincts. Engineers learn early that most “smal…
If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is he…
Suppose a user searches for café and your corpus contains CAFÉ, or they type straße and you’ve stored STRASSE. To make these count as matches, you need a canonical form that erases case distinctions, so that two strings which differ only in case compare…
You read an A/B test report. The variant won by 0.6 percentage points, and next to the number sits a single line: p = 0.03. Should you ship it? Most marketers nod, approve the change, and move on — without ever knowing what that number actually claims. The p value meaning is nar…
Blogssystemsarchitect.netSebastian Henderson16d ago
Most teams stare at three metrics — bounce rate, exit rate, and engagement rate — and act on the wrong one. They see a high bounce rate on a blog post and panic, then redesign a page that was doing exactly what it should. The confusion got worse when GA4 quietly redefined what &…
Blogssystemsarchitect.netSebastian Henderson7d ago
If you’ve been using Claude Code as a single monolithic assistant, you’ve only been using half the tool. Subagents — specialized AI assistants that Claude Code can spin up and delegate tasks to — fundamentally change how you work. Instead of context-switching between…
Video version https://youtu.be/pxnY6T98G14 You may not realize it, but most developers today sit at their keyboards running a manual while loop without realizing it. You write a prompt, read the response, decide what to ask next, and repeat, over and over again. All day long, yo…
If you spend most of your PHP time in Laravel or Symfony, you may have noticed a framework quietly picking up momentum over the past couple of years. Tempest describes itself as “the PHP framework that gets out of your way,” and after spending time with version 3.0 —…
Deploying new features used to mean holding your breath. You merged the branch, pushed to production, and hoped the QA process caught everything. If it didn’t, rollback meant either reverting a deployment or shipping a hotfix under pressure. Feature flags change that story…
๏ปฟ In this episode, Scott talks with James Cole, creator of Firefly III, an open source personal finance manager. James explains why he built Firefly III after graduating college with student debt, how the rule engine automates transaction categorization, importing bank data with…
PHP Podcast – July 23, 2026 Hosts: Joe Ferguson, Sara Golemon, and Holly Schilling Eric got ousted from his own show (no pants required), Holly’s elephants are lost somewhere in the U.S., and the crew talks SIMD, PHP 8.6 feature freeze, and whether AI can actually cr…
Summertime and the living is easy…or so they say. July has us fully immersed in the summer season, which is proving to be a hot one for most. Making it the perfect time to find a cool spot in the shade (or air conditioning) and read the July issue. Let’s get started with a…
The PHP Podcast – July 30, 2026 Hosts: Joe Ferguson, Sara Golemon & Holly Schilling Time travel is real, birds aren’t. The gang argues about Fahrenheit vs. Celsius, boiling rocks, and stones (the weight kind), then gets into PSR-3 logging, the PHP ecosystem, AI s…
Video version: https://youtu.be/ZtAKnN6jWbE I love static analysis tools to a degree that my co-workers find annoying. Tools like PHPStan and Psalm catch bugs before they ever reach production, and once you get used to that safety net, it is impossible to imagine coding without …
Laracon US came back for its 2026 edition on July 28 and 29, at the SoWa Power Station in Boston’s arts district. Two days, one stage, and a lineup of eighteen speakers that ranged from Taylor Otwell himself down to independent educators, package authors, and engineers vis…
I’m a few years into my homelab. (might go into a bit more detail about that at some point!), and I often need to ssh into one of my servers. At home, I can just do this by using a domain name like: ssh ahoy.m.example.ca ssh bread.m.example.ca I have set up Split-Horizon DNS at …
Hola hola amigos! I hope you had a fun week! I enjoyed hanging out with friends and family and watching Spain win the World Cup! Let's boogie. Was this forwarded to you? You can subscribe here! Web links of the week In defense of polyfills How to build a design system strategy y…
Hey friends! We made it to the end of July! It's been a fun summer and though we still have August to work through... I am so excited to be closer to fall time. Ha! Anyway, let's learn! Was this forwarded to you? You can subscribe here! Web links of the week Astro vs Next.js 202…
WordPress 7.1 Beta 1 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local s…
WordPress 7.0.2 is now available. The 7.0.2 security release addresses one critical and one high severity security issue. Because this is a security release, it is recommended that you update your sites immediately. Due to the severity, the WordPress.org team have enabled forced…
WordPress 7.1 Beta 3 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site t…
WordPress 7.1 Beta 4 is ready for download and testing! This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, use a test environment or local site t…
In this 22-minute video for Premium members, I'm showing how to use Laravel for calling a Python image OCR script, running as API with FastAPI. Repository included.
Hierarchical Interest Representation is a research area for Meta Ads. We’re exploring an upstream representation layer over the universe of Ads entities – users, advertisers, products, services – learning unified embeddings that connect users’ inferred interests with the b…
In Sylius, grids handle back-office list rendering: data fetching, column definitions, filters, actions, and more. Sylius E-commerce ships with a large number of ready-to-use grids that can be customized…
Does the excellent Sylius E-commerce framework even need an introduction? If Sylius has established itself in the e-commerce ecosystem, it's largely thanks to its ability to adapt to a wide variety of…
A few years ago, if someone had told me to rewrite the PHP engine in Rust, I would probably have laughed ๐. Not because it is technically impossible, but because such a project traditionally requires…
A community RFC. Nothing here is a standard yet — it’s an invitation to poke holes in an idea. The web already has a small set of quiet agreements that make it work. robots.txt tells crawlers where they may go. sitemap.xml tells them what exists.…
For nearly three decades, HTTP has given developers a small set of request methods that became second nature. GET retrieves data. POST submits data. PUT updates. DELETE removes. It all feels simple — until you need to build a complex search API. In June 2026…
There’s a meme going around: Kung Fu Panda in 2015, poking at a chatbot that can’t finish a sentence — and the same panda in 2026, bowing respectfully to the thing that now writes half his code. It’s funny because it’s roughly true. Eleven years…
There are two URLs on this site that no human has ever opened on purpose. One is llms.txt, a plain-text index written for AI systems — a proposal from September 2024 that says: put one small file at the root of your site telling language…
Why WordPress can miss a scheduled post behind caches and quiet traffic, and the small self-healing drop-in that publishes it the moment a visitor arrives.
Agentimus 1.25.0 is live on WordPress.org. The short version: the plugin can now write and revise posts with AI, inside the admin, and it never publishes anything on its own. Write a post without leaving the admin A quill button opens the writing assistant. You…