<h2>Must know</h2>
<ul>
<li><strong>Axios npm package hijacked in sophisticated supply chain attack</strong>: The lead maintainer of Axios, a library downloaded 100 million times weekly, had their npm account compromised on March 31, 2026. Attackers published malicious versions 1.14.1 and 0.30.4 which injected a fake dependency, <code>plain-crypto-js</code>, to deploy a cross-platform Remote Access Trojan. Socket and StepSecurity report the malware was designed to steal cloud credentials and self-delete to evade forensics; users must immediately downgrade to 1.14.0 or 0.30.3 and rotate all secrets. <a href="https://app.daily.dev/feed-by-ids?id=RlEVDfzaA&amp;id=VsVIeSTu2&amp;id=yQuwbHYRC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Inertia.js v3.0 drops Axios and adds optimistic updates</strong>: Inertia.js has officially released version 3.0.0, marking a major architectural shift by replacing Axios with a built-in XHR client to shave 15KB off bundle sizes. The update introduces a <code>useHttp</code> hook for non-navigation requests and first-class optimistic update support with automatic rollback for failed responses. According to Laravel News, this release also enables SSR in Vite dev mode without a separate Node.js process and transitions the project to ESM-only output. <a href="https://app.daily.dev/posts/WWmxp0DEw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pretext library bypasses the DOM for 500x faster text layout</strong>: Foundational React and Midjourney developer Cheng Lou has released Pretext, a 15KB TypeScript library that solves the 30-year-old browser text measurement bottleneck. By bypassing DOM reflow and using pure mathematical calculations via Canvas, Pretext achieves layout speeds up to 500x faster than standard methods. This enables high-performance UI patterns like virtualized text boxes at 120fps and dynamic multi-column magazine layouts that were previously impossible due to browser jank. <a href="https://app.daily.dev/posts/MEe3G5Jez" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Safari 26.4 ships masonry layouts and WebTransport</strong>: The latest WebKit update introduces <code>display: grid-lanes</code> for native masonry layouts and low-latency bidirectional communication via WebTransport over HTTP/3. <a href="https://app.daily.dev/posts/vXvtsrMcB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare Workflows now generates visual AST diagrams</strong>: A new pipeline uses the oxc-parser to statically derive execution graphs from TypeScript code, rendering parallel and sequential Promise relationships in the dashboard. <a href="https://app.daily.dev/posts/2kRwcIErj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Turbolite serves SQLite from S3 with sub 50ms latency</strong>: This experimental Rust-based VFS uses B-tree-aware page grouping and zstd multi-frame compression to make S3-hosted SQLite databases viable for multi-tenant apps. <a href="https://app.daily.dev/posts/9ZseH6udT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FivFold launches production ready full stack kits</strong>: The new scaffolding platform uses AST-based code injection to drop shadcn/ui components and matching NestJS/Prisma backend boilerplate directly into your codebase. <a href="https://app.daily.dev/posts/hPqZU29Ud" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome 148 fixes the sticky header and column problem</strong>: The update allows <code>position: sticky</code> to track the nearest scrolling container independently per axis, finally enabling simultaneous sticky headers and sidebars in data tables. <a href="https://app.daily.dev/posts/XurEtHI42" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Godot 4.7 dev 3 adds CSS like visual transforms</strong>: New transform offset properties for Control nodes allow for visual tweaks that don’t break the underlying container layout, alongside HDR support on Linux via Wayland. <a href="https://app.daily.dev/posts/tbKkmsNqA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>QuickBeam runs JavaScript runtimes as Elixir GenServers</strong>: This new runtime enables OTP supervision and clustering for JS code directly inside the BEAM, providing native interop without a separate Node.js process. <a href="https://app.daily.dev/posts/72NNkisK0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The tokenmaxxing leaderboard is the new lines of code</strong>: Engineers at Meta and OpenAI are reportedly competing on internal leaderboards for AI token consumption, a metric dubbed ‘tokenmaxxing.’ This is a textbook case of Goodhart’s Law; tracking token burn as a proxy for productivity just encourages agents to generate verbose, expensive slop instead of efficient solutions. <a href="https://app.daily.dev/posts/dl9dAiLtW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI Sora was apparently just a very expensive fever dream</strong>: After months of terrifying Hollywood with ‘existential’ demos, OpenAI abruptly killed the Sora project just one day after publishing a safety blog post. Ed Zitron points out that the supposed $1 billion Disney investment never actually materialized, suggesting the entire saga was more about pumping valuation with vaporware than shipping a product. <a href="https://app.daily.dev/feed-by-ids?id=460WsqsI4&amp;id=yBDFJf8H2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding is just technical debt with a cooler name</strong>: The industry is currently obsessed with ‘vibe coding’—shipping AI-generated apps without understanding the underlying logic. While it’s great for 5-minute Twitter demos, senior engineers are already reporting a 91% increase in code review times as they act as ‘human compilers’ for subtly broken, hallucinated logic that inevitably fails in production. <a href="https://app.daily.dev/feed-by-ids?id=WUNX259d7&amp;id=xbFiYXKjV&amp;id=zTOGp6y0v" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
