
The strategic importance of billing credits is only growing. That’s why we recently incorporated a new credits feature into Stripe Billing, enabling businesses to offer their customers both promotional and paid credits with flexibility and control.

Cloudflare was recently contacted by researchers who discovered a broadcast amplification vulnerability through their QUIC Internet measurement research. Since being notified about this vulnerability, we've implemented a mitigation to help secure our infrastructure.
JC
Josephine Chow, June Slater·February 10, 2025Networking 
Stationery Pad is a handy way to nix a step in your workflow if you regularly use document templates on your Mac. The long-standing Finder feature essentially tells a file’s parent application to open a copy of it by default, ensuring that the original file remains unedited.

One day after testifying before the Senate Banking Committee on debanking, a bank CEO asked me to retract my essay on that topic. I declined.

On Thursday, February 6, 2025, we experienced an outage with our object storage service (R2) and products that rely on it. Here's what happened and what we're doing to fix this going forward.
SJ
Silverlock, Javier·February 7, 2025SRE & Ops 
The most popular option to decompress ZIP files from the Rust programming language is a crate simply named zip — At the time of this writing, it has 48 million downloads. It’s fully-featured, supporting various compression methods, encryption, and even supports writing zip files. However, that’s not the crate everyone uses to read ZIP files. Some applications benefit from using asynchronous I/O, e

The partnership between GitHub and Endor Labs enables application security engineers and developers to drastically reduce time spent on open source vulnerabilities, and gives them the tools to go from finding to fixing.
MR
Mario Rodriguez, Varun Badhwar·February 7, 2025Security 
Tomasz Jakut reflects on the evolution of web design, from the days of table-based layouts and Flash games to the rise of responsive web design (RWD), which often feels like the end of history in web layout. But as 2025 marks the 15th anniversary of Ethan Marcotte’s article, it’s worth asking whether something significant happened after RWD — something so seamless that it went almost unnoticed.

There's a lot of buzz about AI agents, like OpenAI Operator and Perplexity Assistant. How might automation change how we think about UX and websites?
JXJenny Xie·February 6, 2025AI & ML 
Introducing agent mode for GitHub Copilot in VS Code, announcing the general availability of Copilot Edits, and providing a first look at our SWE agent.
TD
Thomas Dohmke·February 6, 2025AI & ML 
Three open source experts offer their advice on sharing open source projects with the world.

Cloudflare achieves ENS certification, and intends to pursue FedRAMP High and IRAP.
WE
Wesley, Emily Bragaw·February 5, 2025Security 
The steps for how I took the Baseline Status web component and made it into a WordPress block that can be used on any page of post.

JEJulia Evans·February 5, 2025Systems 
WHAT IT IS Meta’s Automated Compliance Hardening (ACH) tool is a system for mutation-guided, LLM-based test generation. ACH hardens platforms against regressions by generating undetected faults (mutants) in source code that are specific to a given area of concern and using those same mutants to generate tests. When applied to privacy, for example, ACH automates […]
CWChris Wiltz·February 5, 2025AI & ML 
We’re sharing how Meta built support for data logs, which provide people with additional data about how they use our products. Here we explore initial system designs we considered, an overview of the current architecture, and some important principles Meta takes into account in making data accessible and easy to understand. Users have a variety […]

In today’s web development landscape, the concept of a monolithic application has become increasingly rare. Modern applications are composed of multiple specialized services, each of which handles specific aspects of functionality. This shift didn’t happen overnight - it’s the result of decades of evolution in how we think about and implement data transfer between systems. Let’s explore this journ

Media and journalism companies can now build end-to-end workflows that support Content Credentials by using Cloudflare Images.

Are partials the only thing keeping you writing CSS in Sass? With a little configuration, it's possible to compile partial CSS files without a Sass dependency. Ryan Trimble has the details.

We’ve previously described why we think it’s time to leave the leap second in the past. In today’s rapidly evolving digital landscape, introducing new leap seconds to account for the long-term slowdown of the Earth’s rotation is a risky practice that, frankly, does more harm than good. This is particularly true in the data center […]

Did you see the release notes for Chrome 133? It's currently in beta, but the Chrome team has been publishing a slew of new articles with pretty incredible demos that are tough to ignore. I figured I'd round those up in one place.

When using View Transitions you’ll notice the page becomes unresponsive to clicks while a View Transition is running. This happens because of

Let’s make the most of the shortest of all months, with a new collection of desktop wallpapers celebrating new opportunities, sweet memories, happy little moments, and everything in between. All of them created with love by the community for the community. Enjoy!

All of the things that the CSS Working Group would change if they had a time-traveling Delorean to go back and do things over.
JD
Juan Diego Rodríguez·January 30, 2025Frontend 
An update on our climate investments—and some of the ways Figma helps other companies build green initiatives of their own.


Empowering humanitarian action with open source: A natural language search tool for UN Resolutions.

Design systems play a crucial role in today’s digital landscape, providing a blueprint for consistent and user-friendly interfaces. But there’s another tool that deserves equal attention: the digital playbook.

We've optimized how ISR cache updates are managed on Vercel, making them faster and more cost-efficient.

The @view-transition at-rule has two descriptions. One is the commonly used navigation descriptor. The second is types, the lesser-known of the two, and one that probably envies how much attention navigation gets. But read on to learn why we need types and how it opens up new possibilities for custom view transitions when navigating between pages.

Discover the exciting world of cybersecurity research: what researchers do, essential skills, and actionable steps to begin your journey toward protecting the digital world.
NG
Nancy Gariché·January 29, 2025Security 
It’s not always the big features that make our everyday lives easier; sometimes, it’s those ease-of-life features that truly enhance our projects. In this article, Brecht De Ruyte highlights two such features: `@starting-style` and `transition-behavior` — two properties that are absolutely welcome additions to your everyday work with CSS animations.
BD
Brecht De Ruyte·January 29, 2025Frontend 
After a rather busy third quarter, the fourth quarter of 2024 saw significantly fewer Internet disruptions. This quarter, notable outages were caused by cable cuts, power outages, natural disasters, military action, maintenance, and government direction. Read on for the details.

Cloudflare is the first organisation globally to announce we have been successfully audited against the brand-new international ‘Global Cross-Border Privacy Rules’ system and the brand new ‘Global Privacy Rules for Processors’. Cloudflare will be certified from day one when the certifications launch later in 2025.

Figma’s editorial newsletter about how products take shape—and shape our world.

A deep dive on the work that went into making the component that powers repository and pull request file trees.

Open source AI models are in widespread use, enabling developers around the world to build custom AI solutions and host them where they choose.
KF
Klint Finley·January 28, 2025AI & ML 
After months of anticipation, debate, and even a bit of apprehension, Svelte 5 arrived earlier this year. Frederick O’Brien caught up with its creator, Rich Harris, to talk about the path that brought him and his team here and what lies ahead.

We created a usage-based billing system with ultrahigh throughput; reliable, real-time events processing; and support for complex pricing models. Doing so required reimagining how to build a highly scaled, highly reliable event streaming platform.

Here we explain how we made our data pipeline scale to 700 million events per second while becoming more resilient than ever before. We share some math behind our approach and some of the designs of our systems, as well as issues that we had to face and bugs we had to chase.
CP
Constantin Pan, Jim Hawkridge·January 27, 2025Distributed 
January 27 marks the International Holocaust Remembrance Day — a solemn occasion to honor the memory of the six million Jews who perished in the Holocaust, along with countless others who fell victim

Container queries expand the universe of designs that can be implemented, giving us whole new superpowers. Now that container queries are broadly available, I think it’s time we start exploring this potential! In this post, I’ll share the “killer pattern” I can’t stop using in my work, and explore what’s possible with this new capability.
JWJosh W. Comeau·January 27, 2025Systems 
Learn best practices on importing your designs from Figma, working with shadcn/ui, and leveraging public npm packages.

Explore our simple guide to finding projects, understanding guidelines, and making an impact.

Introducing a new Android UI framework like Jetpack Compose into an existing app is more complicated than importing some AARS and coding away. What if your app has specific performance goals to meet? What about existing design components, integrations with navigation, and logging frameworks? On this episode of the Meta Tech Podcast Pascal Hartig is […]

I was reading through Juan's recent Almanac entry for the @counter-style at-rule and I'll be darned if he didn't uncover and unpack some extremely interesting

Clear documentation transforms abstract design principles into practical tools. Read how leading teams build and maintain documentation that evolves alongside their design systems.

Discover the latest trends and insights on public software development activity on GitHub with the release of Q2 & Q3 2024 data for the Innovation Graph.

With our slice monitoring program, we use machine learning to spot small pockets of performance declines amid the sea of global payments.

Refactoring is something developers do all the time—making code easier to understand, maintain, and extend. While IDEs can handle simple refactorings with just a few keystrokes, things get tricky when you need to apply changes across large or distributed codebases, especially those you don’t fully control. That’s where codemods come in. By using Abstract Syntax Trees (AST), codemods allow you to a

Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.
MS
Michael Stepankin·January 22, 2025Security 
Learn how to modernize legacy code with GitHub Copilot with real-world examples.
AL
Ari LiVigni·January 22, 2025AI & ML 
Data lineage is an instrumental part of Meta’s Privacy Aware Infrastructure (PAI) initiative, a suite of technologies that efficiently protect user privacy. It is a critical and powerful tool for scalable discovery of relevant data and data flows, which supports privacy controls across Meta’s systems. This allows us to verify that our users’ everyday interactions […]


Tremor, a library of React components to build charts and dashboards, joins Vercel. With this acquisition, all Tremor products—including Tremor Blocks—are now free and open source, bringing elegant UI components to all developers.

2024 ended with a bang. Cloudflare mitigated another record-breaking DDoS attack peaking at 5.6 Tbps. Overall, Cloudflare mitigated 21.3 million DDoS attacks in 2024, representing a 53% increase compared to 2023.

On January 19, 2025, ByteDance suspended TikTok and related apps for US users. We examine the 14-hour traffic plunge, recovery near Donald Trump’s inauguration, and how alternatives like RedNote surged.

This year, we’re bringing Config to San Francisco and London. Here’s a first look at what we’re building for our community on both sides of the Atlantic.

Explore insights into open source community growth, innovation, and inclusivity with an updated survey dataset.
KF
Kenyatta Forbes, Kevin Xu·January 21, 2025Engineering 
We’re sharing details about Strobelight, Meta’s profiling orchestrator. Strobelight combines several technologies, many open source, into a single service that helps engineers at Meta improve efficiency and utilization across our fleet. Using Strobelight, we’ve seen significant efficiency wins, including one that has resulted in an estimated 15,000 servers’ worth of annual capacity savings. Strobe