<h2>Must know</h2>
<ul>
<li><strong>Open source projects are dying because of AI coding tools</strong>: AI coding tools are causing a significant decline in open-source project engagement and revenue, leading to layoffs and sustainability crises. Tailwind CSS, for example, saw an 80% revenue drop and laid off 75% of its staff because developers are using AI tools instead of consulting documentation, as reported by Frontend Masters Blog. This 'vibe coding' bypasses critical feedback loops and threatens the financial models of open-source maintainers, who are now calling for AI companies to share revenue. <a href="https://app.daily.dev/feed-by-ids?id=3KjVRqoNX&amp;id=YRC8HFFhU&amp;id=aDodkq3hd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities found in npm and yarn</strong>: Six zero-day vulnerabilities, dubbed PackageGate, have been discovered in npm and yarn JavaScript package managers. These flaws allow attackers to bypass defenses against worm attacks, such as disabled lifecycle scripts and lockfile integrity checks. While pnpm, vlt, and Bun have already patched these issues, npm and yarn have not, with npm claiming the vulnerable behaviors are an intentional design choice. Researcher Oren Yomtov advises developers to migrate to patched alternatives. <a href="https://app.daily.dev/posts/klUkuFZvK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React Server Components hit with DoS vulnerabilities</strong>: Multiple denial-of-service vulnerabilities (CVE-2026-23864, CVSS 7.5) have been identified in React Server Components, affecting React versions 19.0.x through 19.2.x. These flaws can be triggered by crafted HTTP requests, leading to server crashes or excessive CPU usage. Next.js versions 13.x to 16.x are also impacted. Vercel has implemented WAF mitigations, and security fixes are available in updated React and Next.js versions, requiring immediate upgrades for full remediation. <a href="https://app.daily.dev/posts/igYAcLEa7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft releases winapp to ease Windows development</strong>: Microsoft has launched a preview of 'winapp,' a command-line tool designed to simplify Windows app development outside Visual Studio by automating SDK management, manifest creation, and app packaging. <a href="https://app.daily.dev/posts/xa7n8KICk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker sandboxes for AI coding agents now on macOS</strong>: Docker Sandboxes now offers microVM-based isolation for autonomous AI coding agents like Claude Code and Gemini CLI on macOS, allowing secure execution with full access within their sandbox while preventing host system impact. <a href="https://app.daily.dev/posts/6YdOupFK7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ChatGPT code environment gets major upgrades</strong>: OpenAI has significantly enhanced ChatGPT’s code execution environment, adding support for Bash commands, multiple programming languages (JavaScript, Ruby, Go, Java, Swift, C, C++), and the ability to install Python and JavaScript packages via internal proxies. <a href="https://app.daily.dev/posts/7V1v7MpYn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma desktop now runs on Apple M3 via Fedora Asahi Remix</strong>: The KDE Plasma desktop environment is now compatible with Apple M3 chips, a milestone achieved through the Fedora Asahi Remix project, marking significant progress for Linux on Apple Silicon. <a href="https://app.daily.dev/posts/cxEiHEruW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js 25.5.0 introduces single executable applications</strong>: Node.js 25.5.0 has been released, featuring support for Single Executable Application (SEA) generation with a new <code>--build-sea</code> flag, updated root certificates, and an <code>ignore</code> option for <code>fs.watch</code>. <a href="https://app.daily.dev/posts/BrQRGrBKE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DuckDB 1.4.4 LTS focuses on stability and performance</strong>: DuckDB 1.4.4 LTS has been released, bringing critical bugfixes for correctness issues in joins and streaming unions, addressing multiple crashes, and improving performance for prepared statement parameters. <a href="https://app.daily.dev/posts/4NWUdLPx5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Debugbar v4.0.0 released with new ownership</strong>: Laravel Debugbar v4.0.0 has been released, with ownership transferred to Fruitcake, featuring new collectors for HTTP Client and Inertia.js, Livewire v2-4 support, and removal of jQuery. <a href="https://app.daily.dev/posts/6EDqL5sRw" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will solve all math problems and industrialize cyber espionage, apparently</strong>: Import AI newsletter is breathlessly reporting that Numina-Lean-Agent solved all Putnam 2025 math problems and that Opus 4.5 and GPT-5.2 can autonomously generate zero-day exploits. They’re calling it the ‘industrialization’ of cyber espionage and the most transformative tech ever, suggesting we allocate 5-10% of GDP to AI safety. Sounds like a lot of hand-waving and ‘trust me, bro’ without any actual citations or empirical data to back up these grand claims. Just another day in AI hype-land. <a href="https://app.daily.dev/posts/QxbydGQJy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code is the new fast fashion, and it’s just as bad</strong>: Apparently, AI is mass-producing software like fast fashion, prioritizing speed over quality and leading to ‘mediocre, narrow, and rote engineering.’ They’re calling it ‘vibe coding,’ where LLMs churn out inconsistent, inefficient, and disposable code. So, instead of durable software, we’re getting buggy, unreliable tools, all because big tech companies are chasing metrics. Who knew AI could be so… basic? <a href="https://app.daily.dev/feed-by-ids?id=dABjwqV7N&amp;id=vz4g5mSDD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s Windows 11 quality is declining, but hey, AI!</strong>: Windows 11 is reportedly suffering from a three-year decline in software quality, with issues like shutdown failures and unbootable systems from monthly updates. But don’t worry, Microsoft is prioritizing ‘AI-first features’ like Copilot, even if it means neglecting basic OS stability. Because who needs a reliable operating system when you can have an AI that probably can’t even fix your shutdown issues? <a href="https://app.daily.dev/feed-by-ids?id=6BRyVL8ug&amp;id=I7oygxckl" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
