Knowing where traffic comes from can help you decide where it goes. NGINX Open Source 1.31.7 brings GeoIP2 and GeoLite2 database support to the existing native GeoIP modules, giving users a straightforward path to current geolocation data. This release also adds modern HTTP/2 prioritization, improves reloads and binary upgrades for BPF-enabled QUIC deployments, and includes […]

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/tree-appreciator">Tree Appreciator</a></p> <p>Another game experiment with Claude. This one used the default Claude iPhone app (chat mode, not Claude Code mode) where I prompted Claude Opus 5.5 Max with:</p><blockquote><p><code>Build a three js game called "Tree appreciator" - it shows you two algorithmically generated trees and the game mechanics is about appreci...

When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.

In September, we experienced two incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: September 2026 appeared first on The GitHub Blog.

Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tradeoffs we made.The post From 2,500 requests to 24: Rebuilding star history without the stargazers appeared first on The GitHub Blog.

Deno is joining Cloudflare & winding down its investment in the runtime. We're all better off because of its existence.

On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.

<p><strong><a href="https://popcar.bearblog.dev/ai-is-mass-decompiling-games-thats-both-awesome-and-scary/">AI is mass decompiling games. That's both awesome and scary.</a></strong></p>Indie game developer Popcar talks about the recent wave of AI-powered decompilation of existing games, enabling weird mashups between existing games, and producing a boom in game preservation projects to get old games working on new hardware (often in a browser using W...

Scrollspy navigation used to mean IntersectionObserver and a pile of JavaScript. With scroll-target-group, :target-current, and a little anchor positioning, a plain list of anchor links can highlight the current section all on its own.

Yoav Weiss makes a good point: “WebMCP is Agentic WebPerf”. I’ve seen both pushback to WebMCP in the form of “websites should just be better, or agents should be smarter, there shouldn’t be alternative paths to using them built.” And I’ve seen plenty of excitement for WebMCP in the form of “ooooo AI droolface”. But […]

Socket for Origin scans dependency changes in pull requests and flags security risks based on your team’s policies. Now available in Cursor’s App Marketplace.

While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available.

vlt v1.4.0 brings the global store to macOS for up to 3x faster installs on Node 26, plus a new --save-types flag.

This major release brings Shadow DOM support, a refreshed theme built on design tokens, a unified AI experience, Trusted Types support, and simpler error handling.

In August, we launched the , inviting security researchers to try and escape Vercel Sandbox. We also coordinated with cybersecurity experts Trail of Bits to review the source code and security architecture.$1M hacker challenge for Vercel SandboxHere is a summary of the challenge:No reports showed anyone accessing customer data in Vercel Sandbox. The most severe finding was the defect in the upstream Linux kernel.The program's most important report arrived on day three. (pwn.ai), a HackerOne rese

こんにちは、iOSエンジニアのyamakenです。2026年9月11日から9月13日までの3日間にわたって開催されたiOSDC Japan 2026に、LINEヤフーはゴールドスポンサーとして協賛しま...

こんにちは。慶應義塾大学大学院工学研究科人間・社会システム情報科学専攻の菱田快成です。私はIaaSチームのインターン生としてプライベートクラウド「Flava」におけるOpenStackを中心とした仮想...

こんにちは、PR TIMES でインターンをしている水野です。 今回、社内運用の Storybook 上で閲覧できなくなった story を発見するために、全 story を定期的に巡回するクローラを作成したのでご紹介し […]

Test your embedded editor for RTL, CJK input, complex scripts, paste, accessibility, and browser/device combinations.

MRR is easy to calculate and easy to get subtly wrong. Here's how to normalize Stripe subscriptions, classify every movement, and reconcile your number with Stripe's own charts.

You can now create and connect Amazon S3 resources through the without leaving your Vercel project dashboard.Vercel MarketplaceThe Amazon S3 Marketplace integration automatically adds connection details as environment variables and lets you manage resources alongside your application infrastructure, with links to AWS for deeper configuration. Authentication uses short-lived OIDC credentials without storing static AWS keys.Amazon S3 is also available in , which provisions resources, configures co

from is now available for free on as , served by NVIDIA.Nemotron 3.5 LightningNVIDIAAI Gatewaynvidia/nemotron-3.5-lightning-freeNemotron 3.5 Lightning is an open-weight reasoning and chat model for long-running agents, sub-agent work, chatbots, and RAG systems. The model has 30B parameters with 3B active per token, in a hybrid Mixture-of-Experts design that interleaves Mamba-2 and MoE layers with a few attention layers. It has a 1M token context window and supports tool calling and structured ou

<p><strong><a href="https://www.anthropic.com/engineering/redesigning-source-control">Redesigning source control at Anthropic</a></strong></p>Interesting piece from Anthropic describing why and how they built their own custom alternative to Git, based on the dramatic increase in rate of changes to their code after the past six months.</p><blockquote><p>In May 2026, Anthropic averaged around 2,500 code changes merged per day; as of September,...

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-gemini/releases/tag/0.35">llm-gemini 0.35</a></p> <p>I added support to <a href="https://github.com/simonw/llm-gemini">llm-gemini</a> for the <a href="https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/">new Gemini 4 Argon</a> model, made available today via the Gemini API and for customers of their $100/month subscription plan...

The night before AGNTCon + MCPCon Europe, we hosted the Agentic AI Foundation community at the JetBrains office in Amsterdam. The event filled up fast and went to a waitlist, which is not what I expected for a Wednesday evening discussion about how open foundations work. Ibrahim Malik opening the evening. The panel asked what […]

GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan execution time by 86%.The post GitHub’s model for secret detection: Finding more secrets with less noise appeared first on The GitHub Blog.

Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

A deep dive into how D1 architected its control plane to scale and manage millions of databases, while keeping data plane query operations at the edge. We share guiding principles on how to build on the Developer Platform effectively.

We shipped the "vlt outdated" command. Find out what packages need upgrading and if you're vulnerable.

Our strategies to optimize our data pipeline throughput without compromising data quality.

<blockquote cite="https://ghuntley.com/agency/"><p>If the agent isn't using my diagnostics library, I could introspect and update AGENTS.md, but there's still a delta, and it'll drift. Instead, I write a pre-commit hook that checks the git diff for direct calls to observability modules that bypass my diagnostics module. Boom: fail the commit, inject a prompt telling the agent to use the diagnostics library. All of a sudden it's ten out of ten.</p></blockquote><p class...

はじめまして。東京科学大学理学院数学系修士1年の岩崎丈至です。8月3日から6週間にわたって、LINEスキマニのフロントエンド開発にインターンシップとして参加しました。本稿ではその期間中に行った、メイン...

<p><strong>Release:</strong> <a href="https://github.com/simonw/web-edit/releases/tag/0.1a1">web-edit 0.1a1</a></p> <p>Includes <a href="https://github.com/simonw/web-edit/pull/1">performance optimizations</a> written <a href="https://claude.ai/code/session_01LE2R4P74P9GGUbE6yQ5YBt">by Claude Opus 5.5</a> after I fed it <a href="https://simonwillison.net/2026/Oct/12/python-3-15-web-edit-profiling/">this Python 3.15 profilin...

This release adds the pnpm profile and pnpm token commands, the storeIndexFormat: files setting for stores shared over a network filesystem, and faster Python dependency resolution.

is now available on AI Gateway, and 80% off for 30 days (through Nov 12).Drama 3 from Fish AudioThe text-to-speech model is currently in preview and lets you direct voice performances with natural-language instructions in your script, making it useful for voiceovers, character dialogue, and audio storytelling.Describe the emotion and pacing in square brackets, add sounds and pauses where they belong, or wrap selected words in tags such as and to change their delivery. Directions can be written i

and from Microsoft are now available on . Generate images from text or edit existing images through the or the , with one API key and no provider account.MAI-Image-2.6MAI-Image-2.6-FlashAI GatewayAI SDKAI CLIBoth models support photorealistic imagery, text rendering, and targeted edits to products, portraits, and layouts. You can provide up to five reference images to guide edits or combine subjects, with output sizes up to 1536 × 1536.Use or as the model ID. To generate an image, call with a te

Repository checkout and downloads are now faster on Vercel, reducing the time spent preparing your project's files before a build.Git LFSDuring rollout on build machines with more than two vCPUs:These improvements apply automatically, with no action required. Read the to learn more.Git deployment documentationRead moreThe average time to get project files ready fell by 20%.For LFS-enabled projects, the average time to get project files ready fell by 54%, saving approximately 13 seconds per deplo

from is now available on .Gemini 4 ArgonGoogleAI GatewayGemini 4 Argon is built for coding, agentic work, and complex reasoning. It has a 1M token context window, accepts text, image, PDF, and video input, and supports tool calling.On coding tasks, Gemini 4 Argon builds features, fixes bugs, and researches unfamiliar codebases, carrying longer tasks through multiple steps. The model also reads dense diagrams, spreadsheets, layout-heavy documents, and video, which suits tasks like a financial ana

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-meta-ai/releases/tag/0.2">llm-meta-ai 0.2</a></p> <p>Meta AI release <a href="https://research.meta.ai/blog/muse-wonder">Muse Wonder</a> (and Muse Wonder Full), their new "most capable models". These look like they may be Meta's first <a href="https://simonwillison.net/2026/Sep/27/2026-in-llms-so-far/#simon-willison-2026-in-llms.042.webp">Fable class models</a> -...

<p>Python 3.15 <a href="https://www.python.org/downloads/release/python-3150/">is here</a>! Here's the essential <a href="https://docs.python.org/3.15/whatsnew/3.15.html">What's new in Python 3.15</a> guide, this year curated by 3.14 and 3.15 release manager Hugo van Kemenade. As someone who builds open source software that works in every supported Python version, I get to say goodbye to Python 3.10 and start embracing features from Python 3.11.</p><p>F...

Learn how to add custom instructions and skills to your repository, use custom agents, and connect MCP servers like Playwright.The post GitHub Copilot app for Beginners: How to teach Copilot about your codebase appeared first on The GitHub Blog.

<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/python-3-15-web-edit-profiling#readme">Profiling web-edit with Python 3.15: flame graphs and source heatmaps</a></p> <p>I put the <a href="https://simonwillison.net/2026/Oct/12/python-3-15/#a-sampling-profiler">new Python 3.15 profiler</a> through its paces by having GPT-6 Astra Extra High in Codex run it against my new <a href="https://simonwillison.net/2...

<p><strong>Release:</strong> <a href="https://github.com/simonw/web-edit/releases/tag/0.1a0">web-edit 0.1a0</a></p> <p>I was working on a project from my phone using Codex Remote when I found myself wanting to edit a credentials file without round-tripping those credentials through the LLM itself.</p><p>So... I had Codex and GPT-6 Astra Extra High build this Python web app which provides a web UI for viewing and editing files in a folder. It...

Logpush now supports Transformers, allowing teams to filter, redact, and reshape log streams using SQL before export. Powered by Apache DataFusion and Apache Arrow, Transformers apply those changes directly to log data before it reaches the destination.

Selling to banks or government? Aikido now offers CREST-accredited penetration testing, plus AI pentesting between audits.Category: Compliance

Some hot tips on using middleware for simplifying Durable Object creation and managing WebSocket connections.

<p><strong>Release:</strong> <a href="https://github.com/datasette/datasette-ports/releases/tag/0.4">datasette-ports 0.4</a></p> <p>My plugin for detecting and listing all Datasette instances on the current machine now works with the latest version, and displays the detected PID as well. Knowing the PID makes it easier to <a href="https://simonwillison.net/2026/Oct/12/python-3-15/#a-sampling-profiler">attach the new Python 3.15 profiler</a>....

Import Swift and Kotlin directly, full SwiftUI and Compose access, native UI included, and one Vite plugin for web, iOS, and Android.

is now available on AI Gateway. The model is designed for coding, long-running agents, and computer use. It can plan multi-step tasks, delegate work to sub-agents, and recover from errors as work progresses.Muse Wonder from MetaMuse Wonder has a 1M-token context window and supports text, image, and PDF input, tool calling, and structured output. Agents can work with code, screenshots, and documents in the same workflow.You can access the model through AI Gateway with one API key, without creatin

いろいろあって毎回説明するの大変なのでまとめておきます. 型変換 (type conversion) 基本的には明示的 / 暗黙的といった手段によらず, ランタイムの値を別の型に変換することを指していると思います. ランタイムの値が変わるのだから, 結果として静的な方の型も変わることにはなります. JavaScript / TypeScript でいうと, typeof x === "number" な x に対して String(x) と明示的に変換することもできるし, "foo" + x のように (ここでは数値を文字列の文脈で使うことで) 暗黙的に変換されることもあります. 型キャスト …

<p>I remember hearing a while ago that Dwarf Fortress didn't use version control. That fact has been lodged in my head, because given its inherent complexity I have trouble imagining a codebase that would benefit from version control <em>more</em>. That's art.</p><p>I went looking and I'm sad to report that the days without version control appear to have ended. Quoting Tarn Adams over time:</p><ul><li>March 2013: <a href="https://www.reddit.com...

This release adds OIDC authentication to pnpm dist-tag and the tool: protocol. pnpm publish now checks which registry an NPM_ID_TOKEN was issued for before using it.

<p><strong><a href="https://github.com/actions/python-versions/commit/49858b91c92d27403416ee43117032e91d00ce24">Python 3.15.0 added to actions/python-versions</a></strong></p>Bit of a niche link, but I've been waiting for this for a couple of days - I even <a href="https://chatgpt.com/share/6acad42a-2868-83e8-9a16-736f9def2b45">told ChatGPT</a> to check for it:</p><blockquote><p><code>Clone https://github.com/actions/python...

`document.startViewTransition()` の遷移はドキュメント全体で 1 つしか実行できず、ページ全体の上に描画されます。`element.startViewTransition()` を使うと、遷移を特定の要素に限定して、複数の遷移を同時に実行できます。この記事では、2 つのリストを同時にアニメーションさせる例を通じて基本的な使い方を紹介します。

Fixes 166 issues, addressing 122 👍. bun check, a TypeScript type checker built into Bun that is 3x to 6.4x faster than tsc 7, --check for bun run, bun build and bun test, 67–89% less idle CPU, Bun.FetchSession, experimental Bun.ModuleGraph, --disallow-code-generation-from-strings, up to 2.7x faster large node:http responses, a JavaScriptCore upgrade with faster JSON.parse, faster rejected-promise handling, CompressionStream compression levels, If-Range support in Bun.serve, bun install skips ta...

<blockquote cite="https://www.nytimes.com/2026/10/09/technology/anthropic-rogue-ai-agents.html"><p>Anthropic detailed the activity of its A.I. agents in <a href="https://www.anthropic.com/research/investigating-unintended-model-actions">a blog post</a> on Friday, without naming the targeted websites. But two sources with knowledge of the incidents said Anthropic’s A.I. agents had submitted 20 visa applications through a form available on the State Department’s website. A...

This release shares task results and dependency builds through a remote cache, adds the addMissingPeerTypes setting, and lets pnpm add --config and pnpm update manage configuration dependencies. It also fixes dangerouslyAllowAllBuilds running the build scripts of packages that allowBuilds denies.

<p><strong><a href="https://deno.com/blog/cloudflare">Deno is joining Cloudflare</a></strong></p>The Deno team released the first version of <a href="https://github.com/denoland/celld">celld</a> back in August - their open source implementation of the Durable Objects pattern from Cloudflare Workers.</p><p>Today, Cloudflare are acquiring Deno outright, with the goal of building on <code>celld</code> to "make workerd self-hos...

Your agent can now use the to buy a domain. Vercel CLIThe agent discovers candidates with , checks availability and registrar pricing with and , and initiates the purchase with .vercel domains searchvercel domains checkvercel domains pricevercel domains buyThe purchase decision itself stays with you by design. Run non-interactively, returns a structured, machine-readable error and the suggested next commands, so the agent hands the confirmation back to you, prohibiting it from spending money wit

We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline. We’ve also lowered Clef-flash pricing and boosted Clef inference speeds by up to 2.0x.

New Pro teams now default to a 30-day deployment retention period.Coding agents have accelerated development, increasing deployment frequency and the amount of stored deployment history. Shorter retention keeps recent history available while limiting older history and its storage costs.You can choose a longer retention period in your team's settings when you need more history for inspection or rollback. Deployment Storage and Functions Storage each cost $0.10 per GB-month. Older deployments may

and Functions Storage billing will begin for all Pro teams at $0.10 per GB-month. Check your email for details about when billing will start for your team. To keep storage costs low, the deployment retention window also changes to 30 days.Deployment StorageDeployments older than 30 days will be deleted starting October 23, unless you opt out in your retention settings before then. Retention settings already at 30 days or shorter are unchanged.Review retention periods for Pre-Production, Producti

Learn how vulnerability remediation works for each type of flaw and what to do when upgrading a dependency breaks your build or isn't an option.Category: DevSec Tools & Comparisons

The barriers to building software have collapsed. Today, anyone can build. Hackathons are a great place to start learning.The post Hack the World: Why hackathons are still the best place to learn to build appeared first on The GitHub Blog.

Divs and spans are fine, but purposefully meaningless. Often the meaning actually matters, so let's look at some of those situations.

<blockquote cite="https://twitter.com/matthew_d_green/status/2108552414978564418"><p>Everyone is very concerned about being respectable, so I’m going to be the goofball who raises worst-case possibilities. I think there is a 1% chance we live in Minicrypt, and a 15% chance we functionally lose confidence in our existing public-key encryption algorithms. [...]</p><p>The problem here is that the speed of AI producing surprises, and the speed of human beings replacing stand...

Putting ourselves in the best place to build the future of the web

GhostAction returns: compromised maintainers push a fake security-audit.yml workflow that steals CI/CD secrets and cloud credentials from GitHub repos.

arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

We compare the top developer security tools for enterprise teams on signal quality, governance, and remediation: Aikido Security, Snyk, GitHub Advanced Security, SonarQube, Checkmarx, and Endor LabsCategory: DevSec Tools & Comparisons

On-demand CPU and memory profiling for Cloudflare Workers and Durable Objects is now available. Now you can generate interactive flamegraphs directly in production to quickly track down memory leaks and performance bottlenecks.

<p>I shipped a new feature for my blog today: the <a href="https://simonwillison.net/newsletters/">Newsletters</a> page, which offers an index of all of the newsletters I've sent out, both my free <a href="https://simonw.substack.com/">weekly Substack</a> and my <a href="https://github.com/sponsors/simonw/">monthly sponsors-only</a> updates. I built the feature almost entirely using my voice, chatting away to my laptop while I cooked dinner.</p>&l...

The Deno team is joining Cloudflare to radically simplify self-hosting Workers and Durable Objects, so developers can use the same primitives in more places.

A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

2027 web platform feature rankingThis is the second year we're doing this, and last year's 1900+ rankings not only helped us push the right proposals in the Interop process, it was also used to prioritize web platform feature development in Firefox.Certainly beats thumbs up in GitHub issues! Make your voice heard.This hue shall passA fabulous colour contrast tool from the great folks over at Clearleft.Dark forestryNot only an outstanding and important piece of writing, but the design and effects

Rillet on VercelStandardizing every internal agent on eveRunning customer requests through agents, end to endUsing AI Gateway to give every builder every modelManaging builder access through Enterprise Managed UsersTripled shipping rate in three months with eve agents deployed on VercelTwo-person team closed 800+ Linear tickets in its first 4 monthsBuilder access via Enterprise Managed Users, SSO, and Directory SyncShips customer-requested changes to production in as little as two hoursGives eve

Eric Bailey explains the thinking and research that go into adding just a few custom keyboard shortcuts to a web app. There’s an absolute ton to consider and test, and plenty of challenges can come from your own team.

<p><strong>Release:</strong> <a href="https://github.com/simonw/ttok/releases/tag/1.0">ttok 1.0</a></p> <p>I released <a href="https://simonwillison.net/2026/Oct/8/ttok/">ttok 0.4</a>, ran <code>uv tool upgrade ttok</code>, piped a file into the new version... and realized that it was defaulting to the GPT-4 tokenizer when it should very clearly default to GPT-5/GPT-6 instead!</p><p>I figured switching the default was...

Iframes can now size themselves to their content with CSS. What it replaces, where it helps, and why the embedded page has to say yes.

This release fixes --workspace-concurrency=Infinity, filters set by an updateConfig hook, and store fetches with enable-modules-dir=false.

This release fixes two ways pnpm install could fail, runs tools of any Rust release through pnx, and treats registry.npmjs.com as an alias of the npm registry.

This release adds Rust toolchain management, links the agent skills that dependencies ship, adds the permissions setting, and keeps the colors of streamed script output.

Better Markdown, better search, better performance.

is now available on . It answers typed questions about text with probabilities, choices, and scores. It can be used to classify support requests, select the next step in a workflow, or assess an AI response against a rubric.Decision-1 from MicrosoftAI GatewayThe model can answer yes/no questions, choose among named categories, or score an input against an ordered set of criteria. Multiple questions can share the same input in one request. Choice and score answers include probabilities for each o

is now available on .Liquid d1AI Gatewayd1 is a that evaluates shared state against typed questions for classification, routing, and scoring. It returns structured answers with probabilities without generating text tokens. decision modeld1 also has vision support: the model can answer typed questions about images for visual classification, inspection, and scoring.Use through the , the , or the . These examples ask whether a support agent issued a refund:liquid/d1AI SDK decision APIOpenAI-compati

<p><strong>Release:</strong> <a href="https://github.com/simonw/ttok/releases/tag/0.4">ttok 0.4</a></p> <p><code>ttok</code> is my CLI tool for counting tokens, using OpenAI's open source <a href="https://github.com/openai/tiktoken">tiktoken</a> library.</p><p>It hasn't been in updated in a couple of years, but I finally fixed a Click warning, updated CI, and added a <code>--list-models</code> command to l...

Safari Technology Preview Release 254 is now available for download for macOS Golden Gate and macOS Tahoe.

<blockquote cite="https://htmx.org/essays/yes-and/"><p>Computer programming is, fundamentally, about two things:</p><ul><li>Problem-solving using computers</li><li>Learning to control complexity while solving these problems</li></ul><p>I have a hard time imagining a future where knowing how to solve problems with computers and how to control the complexity of those solutions is <em>less</em> valuable than it is today, so I ...

Inventory the AI agent skills on developer machines and in your GitHub repositories: which agent loads them, what they can execute, and where they came from.

We compare the top FedRAMP-compliant security tools in 2026: Aikido for Government, Checkmarx One for Government, Qualys, Rapid7 InsightGovCloud, Snyk for Government, Tenable, Wiz for GovernmentCategory: DevSec Tools & Comparisons

As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and experiences hacking on GitHub.The post How one bug bounty researcher chooses the features they investigate appeared first on The GitHub Blog.

You can now skip sending client request bodies to with . This reduces incoming usage for middleware invocations and can improve time to first byte, especially for requests with large bodies.Routing MiddlewareFast Origin TransferskipMiddlewareRequestBodyEnable this option only if your Routing Middleware doesn’t read request bodies. Vercel Functions and rewrite targets still receive the body, so you can read and process it there.Set to in your project’s JSON configuration file, :skipMiddlewareRequ

We redesigned Cloudflare Radar to make real-time global traffic and outage data accessible to a wider audience — including journalists, less technical researchers, and everyday users. By introducing an interactive map and standardized components, we simplified navigation while preserving technical depth.

A new Vercel Sandbox is now ready to run commands and read or write files when creation completes. now resolves only after snapshot restoration completes, so the first command or file operation no longer waits for it. Startup errors also reject instead of surfacing during that operation.Sandbox.create()Sandbox.create()Snapshot restoration time now counts toward creation instead of the first operation. Creation is about 50 ms longer at p50, with a larger increase possible for uncached snapshots.

malicious code detected in tensorlake 0.5.144Category: Vulnerabilities & Threats

The malicious release was built from the project's own main branch and published with an npm provenance attestation.

こんにちは！LINEヤフー 分析ユニット LINE Service Analytics Divisionの柳です。8月20日にデータサイエンス関連の事例を共有するイベントを開催しました。本記事では、イ...

Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.