
Private vulnerability reporting now generally available
Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.
The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

How to verifiably link npm packages to their source repository and build instructions.

New playground: integer.exposed

In this article, Adel Khamatov shares a model of color mechanics that he came up with during research on developing UI kits and illustrates an approach to solving related problems with best practices.

Get detailed, first-party page views, traffic analytics

Cloudflare Zaraz now can also help you with gathering and managing consent. With this new tool, you can easily collect user’s consent preferences on your website, using a consent modal, and apply your consent policy on third-party tools you load via Cloudflare Zaraz

The speed of an Internet connection is more about decreasing real-world latency than adding underutilized bandwidth

Starting today, you don’t have to be a network engineer to figure out what your Internet is good for. Let’s tell you how we’re doing it.

GitHub is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace.

In this episode of The Smashing Podcast, we take a look at design storytelling. What is it, and how can it help us shape digital experiences? Vitaly talks to Chiara Aliotta to find out.


We’ve gotten great feedback on default setup, a simple way to set up code scanning on your repository. Now, you have the ability to use default setup across your organization’s repositories, in just one click.

A list of programming playgrounds

What the research is: Millisampler is one of Meta’s latest characterization tools and allows us to observe, characterize, and debug network performance at high-granularity timescales efficiently. This lightweight network traffic characterization tool for continual monitoring operates at fine, configurable timescales. It collects time series of ingress and egress traffic volumes, number of active f

Have you ever wondered if things could have been done differently? But not sure how? Well, then, do not fall in love with the solution, but fall in love with the problem! Here’s an article to dive deep into how design thinking could do just that.

This article describes the EXPLAIN option GENERIC_PLAN introduced in PostgreSQL 16, including some examples. Learn about options syntax.

Explore how migrating your source code and collaboration history to GitHub can lead to some surprising benefits.

Rapid advancements in generative AI coding tools like GitHub Copilot are accelerating the next wave of software development. Here’s what you need to know.



Cloudflare Zero Trust named to Gartner® Magic Quadrant™ for Security Service Edge

The best teams understand what they’re producing, why they’re doing it, and how they can get it done—here’s how managers can make it happen.

My account of an internal chat with Xu Hao, where he shows how he drives ChatGPT to produce useful self-tested code. His initial prompt primes the LLM with an implementation strategy (chain of thought prompting). His prompt also asks for an implementation plan rather than code (general knowledge prompting). Once he has the plan he uses it to refine the implementation and generate useful sections o

How GitHub Enterprise ensures secure and compliant developer workflows for highly regulated industries.