Has vibe-coding turned into "doom-coding"? In this post, we try to untangle why AI burnout occurs and share work practices to preserve both our craft and our sanity: evilmartians.com/chronicles/a...

We take supply chain attack mitigation seriously. Since 2024, we've adopted this systematic approach to improve our own and our clients' code protection.

My colleague at @evilmartians.com wrote a great article on why LLMs are making developers burn out faster and how to avoid it. evilmartians.com/chronicles/a...

imgproxy v4 is live on Product Hunt 🚀 Would love your support, comments, and reposts 💙 www.producthunt.com

Hundreds of millions of people write right-to-left. Still, most developer tools treat it as an afterthought. But this isn't an edge case. If a user types in Arabic or Hebrew, many English apps will break. In most cases, the fix is just two HTML attributes, explained in this article:

Alexa, play 'I Will Survive' by Gloria Gaynor.

Meet Svyat (@skryukov.dev), one of our sr backend engineers and one of the core maintainers to Inertia Rails. He's a father, has a beautiful cat, and loves fancy coffee gear. He's committed to giving back to the Rails community in the form of OSS tools like Skooma, Typelizer, and Turbo Mount.

Open source maintainer burnout is real. A tired maintainer is a dangerous one, as they can fall for seemingly real, AI-generated attacks. @chael.codes asks us to go back to the reason why open source exists: if we can all look at and review the code, we can all make sure it stays safe.

Last summer we cut Whop's test suite in half (~11k RSpec examples at the time). A year later it grew to 30k specs and CI jumped back to 4m30s. So we dug in again. We found four hidden performance killers and used those findings to ship TestProf v1.6.0. Full story by @palkan.bsky.social:

Your users are lying to you. Matt Biilmann (@biilmann.blog), co-founder and CEO at @netlify.com, says users will always tell you your product is "really cool" after you show it to them. But if they don't try to use your tool after you've sat down and walked them through it, you have a problem. 1/3

TanStack has been compromised. Recommendations from our frontend principal @en.sitnik.es: 1. Move to a package manager with protection enabled by default, e.g., pnpm 11 2. If you can't switch pms, enable ignore-scripts and minimumReleaseAge. 3. Don't use pull_request_target. Use workflow_run.

Frontend engineers don't always think about the design of the app they're coding. With AI code gen, it can feel even less natural to consider the UX. But frontends are still the first people to use the app before a real user does. Here are six best design practices for frontend developers:

Optimistic UI is a lie. It shows users what to expect before the server actually confirms it. Inertia Rails solves this by plugging into each framework’s native reactivity system and automatically re-rendering when page data changes. See how it works: evilmartians.com/chronicles/o...

You don't have to hand-roll a Dockerfile and compose.yml every time you start a new Rails project or run claude --dangerously-skip-permissions. @palkan.bsky.social recently shipped the 2026 edition of Ruby on Whales, our Docker-based dev setup. It installs with a single rbytes install command.

We migrated an @astro.build site from React and Ark UI to native Web Components: 100 KB less JavaScript, no functionality lost, and a tiny library called nanotags that makes Custom Elements enjoyable to write. Here's how we did it: evilmartians.com/chronicles/f...

Building a product is one thing; knowing someone is willing to pay for it is an entirely different game.  After shipping Thicket's marketplace in 2 weeks, our team built a full demand validation infrastructure around it with a $2K budget. This resulted in:

Small open-source npm package? Same supply-chain risk. I’ve just updated astro-iubenda, a small Astro integration for using iubenda in @astro.build projects: github.com/Valyay/astro... Here are 6 supply-chain hardening techniques I added to the repo:

When @palkan.bsky.social gives a keynote about the future of Rails, it's worth paying attention. Back in November 2025, he closed SF Ruby Conference with a presentation called "Rails X." We asked him about it and other topics in a short conversation. Find the links below.

April's SF Ruby Meetup is now live on YouTube! We met at Intercom and listened to: - @bscanlan.bsky.social on making Claude a full-stack engineering platform - Konstantin Gredeskoul on adaptive user flows with Ruby DSLs and LLMs - @cdavis.xyzon semi-autonomous software with Rubot

Vite is the build tool every frontend developer wants, but it's not in rails new. Vite and Propshaft (Rails' asset pipeline) have refused to work together for years. @skryukov.dev made that incompatibility disappear with rails_vite (github.com/skryukov/rai...).

We already have memory for AI coding agents. It’s called git. And many teams are filling it with garbage: fix bug update styles refactor component

Getting customer funding is the best way to grow, told us Ali Seyedmehdi, co-founder and COO at  Publitas. This is a Rails platform that lets you turn catalogs into interactive digital retail experiences. It's bootstrapped and hit $9.7M in revenue in '25. Here's his advice to early-stage founders:

We donated to @pnpm.io as part of our open source donations program. It's the default package manager for many of our frontend engineers. The team behind the 11.0 release did an amazing job of securing pnpm against supply-chain attacks, making it one of the safest package managers out there.

Rachael (@chael.codes) is a big open-source contributor, as she likes to be part of the collective action, work on different projects, and share them with many.  She's very excited about Herb and what it's doing for the Rails ecosystem. Ans, is also a big fan of psych-pure and devcontainers.

Your users are no longer just humans and your tools need to adapt to this change. This happened at @lingodotdev.mbdio.uk, where @maxprilutskiy.bsky.social and his team built an MCP server to guide agents through its localization platform. We talk about this and more in the episode linked below.

@marcoroth.dev is an active part of the Rails community. He built Herb by listening to developers' frustrations and made it open source to give back. We interviewed him back in Nov 2025. In this chat, he explains what Herb is, how Ruby simplifies AI coding, and why attending events matters.

Coffee, waffles, and a conversation about agent experience (AX). If you're a devtool founder in SF, we're meeting on May 5 at Blue Bottle Coffee. Joining us: @inazarova.bsky.social and @biilmann.blog, who coined the term AX. Space is limited, so sign up to secure a spot:

🚨Early Bird tickets for RubyConf 2026 end April 30. Yes, this April 30. We’re talking days. Don’t be the person who shows up May 1 asking “wait, what happened?” General Admission pricing starts tomorrow. This is your heads up. You’ve been warned. Tickets ti.to/rubyconf/rub...

Ruby is still a beautiful language to work with. This is what makes engineers like Brad choose it over others. Back in Nov 2025, we interviewed @bradgessler.com , the co-founder of @terminalwire.com . He shared what excites him about Ruby, his stance on AI coding, and what Terminalwire is.

imgproxy v4 comes with updates - Internal cache and changes to conditional request behavior - Parallel image downloading - Improved SVG minification and colorspace preservation - Image classification and improved autoquality - Better observability Info to join early access in @imgproxy.net's post:

Inertia Rails exists because the team (Brandon Shar, Brian Knoles, @skryukov.dev) wanted to use React for a Rails application. They built the adapter and started getting community contributions to make it feel more like a Rails app, even when using JS frameworks. We interviewed them in Nov 2025.

Agent-led growth is your next distribution channel. It's also an attack surface: 96% of audited MCP servers ship with exploitable vulns. @inazarova.bsky.social shares a playbook for making AI agents discover and use your devtool while defending against uninvited guests.

"You can have a great product, but if you don't have that fire in you, it's gonna go nowhere," says Amir Rustamzadeh, partner at Firestreak Ventures.  Of course the product matters, but to him, 9 out of 10 times, it's the founder that closes deals. Link to the complete interview below.

Meet Gleb, one of our product designers specializing in devtools. He was one of the first designers to try vibe-coding, and has since shipped multiple production-ready products. He's also a music lover, musician, and vinyl collector. https://bsky.app/profile/evilmartians.com/post/3mgxjkhgvss2l

Early-stage founders, this one's for you. Amir Rumstazadeh is a partner at Firestreak Ventures and the person who coined "developer experience." In this episode of our pod, we discussed: - What he looks for in a founder - Product and revenue metrics at an early stage - How to write a pitch deck

All our tools and processes were built on assumptions about how we should write software.  @josevalim.bsky.social believes coding agents are forcing us to question those assumptions, and the only way to find answers is through experimentation.

We work with dozens of Ruby on Rails projects every year. Naturally, we've have found our favorite gems. This idea led @palkan.bsky.social to create this blog post, where he imagined what if these gems were somehow merged into a single Gemfile: the ideal Martian Gemfile. Grab them here:

“Your product can’t outgrow your codebase,” shares @palkan.bsky.social in the closing keynote at Tropical on Rails. He used the analogy of taking a product from 0 to 2 (idea to scaling) without separating the code from the business. 🧵

Using Claude Code to build apps is fun until real people start using them, making feature requests, and reporting bugs. Suddenly, you and Claude aren’t enough to keep up. From Mars to Brazil, @inazarova.bsky.social took over the Tropical on Rails stage for 5 minutes to address this. 🧵

“AI isn’t going to replace us,” says Rails legend Fabio Akita, He took us along his journey of catching up with AI coding. His learnings: 1. AI is a reflection of who we are. 2. If you couldn’t do something without AI, you can’t do it with AI. 3. Don’t outsource your judgment to an LLM. 🧵

@marcoroth.dev opened Tropical on Rails this morning by asking one question: what is a programming language? We could say before it was a syntax/shared grammar, a parser, and a compiler/interpreter. Now, it’s more of a full tool chain that’s built to truly integrate with other tooling. 🧵

@wallarm.bsky.social protects 20,000+ apps from malicious traffic in real time. This growth caused its event pipeline to reach 30k RPS before Black Friday. The Wallarm team reached out, and in two months, we migrated its event pipeline from NATS to Kafka with zero outages. Read the full story:

Last summer we cut Whop's test suite in half (~11k RSpec examples at the time). A year later it grew to 30k specs and CI jumped back to 4m30s. So we dug in again. We found four hidden performance killers and used those findings to ship TestProf v1.6.0. Full story by @palkan.bsky.social:

I started a new open-source project: Nano Stores SQL, lets you use SQLite via WASM in the browser (or React Native) together with the other smart Nano Stores. So the user’s UI doesn’t have to wait for server data and feels instant. github.com/nanostores/sql

Last summer we cut Whop's test suite in half (~11k RSpec examples at the time). A year later it grew to 30k specs and CI jumped back to 4m30s. So we dug in again. We found four hidden performance killers and used those findings to ship TestProf v1.6.0. Full story by @palkan.bsky.social:

You can now look like a Martian! We made our merch store public and it has amazing designs by Anton Lovchikov. Grab what you like. We ship internationally. Link below.

We just donated to @wooorm.com as part of our OSS donation program! He's an engineer based in the Netherlands and the maintainer of 550+ projects. If your project uses Markdown, it probably already runs on one of his tools. His most well-known one is mdx for writing Markdown with JSX components.

We stopped donating to your open source project every month. Here's why. We believe keeping OSS maintainers motivated and showing them we value their work can help prevent burnout. So we're starting a new process for frontend solutions: 🧵

In our new blog post, @inazarova.bsky.social analyzed 1,140 early-stage funding rounds in devtools, cybersecurity, and infrastructure. Three stories jumped out.

Part 5 of our contract-first series. This time: NestJS. It's had an open issue for spec-first support since 2020 so Yuri Mikhin built a plugin for Hey API, and contributed it upstream. One implements clause and your controllers either match the spec or the build fails: