🛠️ All DevTools

[Other] UUIDv47: Store UUIDv7 in DB, emit UUIDv4 outside (SipHash-masked timestamp)

[Code Quality] Never ship broken AI code again Over 40% of AI-generated code contains issues. kluster.ai automatically reviews and fixes code in real-time as AI writes it, instantly correcting bugs, preventing security vulnerabilities, and fixing logic errors right in your favorite IDE.

[Other] Turn ideas into automations by chatting with AI CodeWords turns plain English into powerful automations in minutes. Build, edit, deploy and fix workflows by chatting with Cody, your AI workflow builder. Connect tools, create complex logic through code, and deploy workflows without setup or configuration.

[IDE/Editor] Lightweight always-on-top notes for devs & multitaskers PeekNote has been reimagined with unlimited tabs, advanced text blocks, a redesigned UI, smoother interactions, and more reliable saving. It’s no longer just a note-taker — it’s a productivity powerhouse for developers and creators.

[Build/Deploy] Deploy any apps in seconds, no DevOps required Bult simplifies CI/CD pipelines, auto-deployments, and product launches. Build, deploy, and scale apps in minutes without DevOps complexity. Perfect for developers and startups.

[Other] Trusted Partner in Futuristic Blockchain Innovation Addus is a reputed enterprise blockchain development company, turns ideas into futuristic solutions across industries like healthcare, fintech, gaming, and more. Our experts master Web3 tools, APIs, and Oracles, guiding you from design to final deployment.

[Other] Notion API importer, with Databases to Bases conversion bounty

[Other] Show HN: A PSX/DOS style 3D game written in Rust with a custom software renderer So, after years of abandoning Rust after the hello world stage, I finally decided to do something substantial. It started with simple line rendering, but I liked how it was progressing so I figured I could make a reasonably complete PSX style renderer and a game with it.<p>My only dependency is SDL2; I treat it as my &quot;platform&quot;, so it handles windowing, input and audio. This means my Cargo.toml is as simple as:<p>[dependencies.sdl2] version = &quot;0.35&quot; default-features = false features = [&quot;mixer&quot;]<p>this pulls around 6-7 other dependencies.<p>I am doing actual true color 3D rendering (with Z buffer, transforming, lighting and rasterizing each triangle and so on, no special techniques or raycasting), the framebuffer is 320x180 (widescreen 320x240). SDL handles the hardware-accelerated final scaling to the display resolution (if available, for example in VMs it&#x27;s sometimes not so it&#x27;s pure software). I do my own physics, quaternion&#x2F;matrix&#x2F;vector math, TGA and OBJ loading.<p>Performance: I have not spent a lot of time on this really, but I am kind of satisfied: FPS ranges from [200-500] on a 2011 i5 Thinkpad to [70-80] on a 2005 Pentium laptop (this could barely run rustc...I had to jump through some hoops to make it work on 32 bit Linux), to [40-50] on a RaspberryPi 3B+. I don&#x27;t have more modern hardware to test.<p>All of this is single threaded, no SIMD, no inline asm. Also, implementing interlaced rendering provided a +50% perf boost (and a nice effect).<p>The Pentium laptop has an ATI (yes) chip which is, maybe not surprisingly, supported perfectly by SDL.<p>Regarding Rust: I&#x27;ve barely touched the language. I am using it more as a &quot;C with vec!s, borrow checker, pattern matching, error propagation, and traits&quot;. I love the syntax of the subset that I use; it&#x27;s crystal clear, readable, ergonomic. Things like matches&#x2F;ifs returning values are extremely useful for concise and productive code. However, pro&#x2F;idiomatic code that I see around, looks unreadable to me. I&#x27;ve written all of the code from scratch on my own terms, so this was not a problem, but still... In any case, the ecosystem and tooling are amazing. All in all, an amazing development experience. I am a bit afraid to switch back to C++ for my next project.<p>Also, rustup&#x2F;cargo made things a walk in the park while creating a deployment script that automates the whole process: after a commit, it scans source files for used assets and packages only those, copies dependencies (DLLs for Win), sets up build dependencies depending on the target, builds all 3 targets (Win10_64, Linux32, Linux64), bundles everything into separate zips and uploads them to my local server. I am doing this from a 64bit Lubuntu 18.04 virtual machine.<p>You can try the game and read all info about it on the linked itch.io page: <a href="https:&#x2F;&#x2F;totenarctanz.itch.io&#x2F;a-scavenging-trip" rel="nofollow">https:&#x2F;&#x2F;totenarctanz.itch.io&#x2F;a-scavenging-trip</a><p>All assets (audio&#x2F;images&#x2F;fonts) where also made by me for this project (you could guess from the low quality).<p>Development tools: Geany (on Linux), notepad++ (on Windows), both vanilla with no plugins, Blender, Gimp, REAPER.

[Other] Irssi: IRC Client in a Docker Image

[Other] Show HN: npm-daycare, an NPM proxy that filters out recent & small packages Hey all! npm-daycare is a simple NPM proxy built on Verdaccio which filters all packages that:<p>- are younger than 48h (it will just provide an old version instead)<p>- have fewer than 5,000 weekly downloads<p><a href="https:&#x2F;&#x2F;github.com&#x2F;stack-auth&#x2F;npm-daycare" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;stack-auth&#x2F;npm-daycare</a><p>This is in response to the recent supply chain attacks that shattered the JavaScript ecosystem [1]. It&#x27;s likely not a problem that will go away any time soon, so we figured we&#x27;d build something to protect against it.<p>Doing this on the proxy layer means it will work across the entire system, as proxies are set globally. In the future, we could also add more filters to the proxy.<p>To get started, just run the Docker container:<p><pre><code> docker run -d --rm --name npm-daycare -p 4873:4873 bgodil&#x2F;npm-daycare npm set registry http:&#x2F;&#x2F;localhost:4873&#x2F; pnpm config set registry http:&#x2F;&#x2F;localhost:4873&#x2F; yarn config set registry http:&#x2F;&#x2F;localhost:4873&#x2F; bun config set registry http:&#x2F;&#x2F;localhost:4873&#x2F; npm view @types&#x2F;node # has recent updates npm view pgmock # has &lt;5,000 weekly downloads </code></pre> Downside: npm-daycare won&#x27;t show packages that are younger than 48h on its default config, so be aware of that when you try to update your packages to patch a zero-day exploit.<p>You probably also shouldn&#x27;t rely on this as your only line of defense. Curious to hear what you think!<p>[1] <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45260741">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45260741</a>

[Other] Show HN: Ghostpipe – Connect files in your codebase to user interfaces Hey HN!<p>I built Ghostpipe because:<p>1. I like to keep data about my software in the codebase and under version control.<p>2. I don’t like always working in raw text files with domain specific languages (eg Terraform, Openapi, er diagrams).<p>Ghostpipe is an open source tool that creates a bridge between files in your codebase and applications using webrtc. This lets developers work with user interfaces where appropriate, while still having access to the underlying raw text files.<p>A few side-benefits to this setup are:<p>1. AI agents are good at working with local text files, so we can keep using those.<p>2. Generally speaking, no signup or installation is needed to use Ghostpipe apps, because all relevant data is in the codebase.<p>I built a few demo apps with Ghostpipe support (Excalidraw &amp; Swagger UI), and I hope this proof of concept spurs some interest in taking this idea further.<p>Thanks!

[Other] PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows

[Other] Show HN: AI Code Detector – detect AI-generated code with 95% accuracy Hey HN,<p>I’m Henry, cofounder and CTO at Span (<a href="https:&#x2F;&#x2F;span.app&#x2F;" rel="nofollow">https:&#x2F;&#x2F;span.app&#x2F;</a>). Today we’re launching AI Code Detector, an AI code detection tool you can try in your browser.<p>The explosion of AI generated code has created some weird problems for engineering orgs. Tools like Cursor and Copilot are used by virtually every org on the planet – but each codegen tool has its own idiosyncratic way of reporting usage. Some don’t report usage at all.<p>Our view is that token spend will start competing with payroll spend as AI becomes more deeply ingrained in how we build software, so understanding how to drive proficiency, improve ROI, and allocate resources relating to AI tools will become at least as important as parallel processes on the talent side.<p>Getting true visibility into AI-generated code is incredibly difficult. And yet it’s the number one thing customers ask us for.<p>So we built a new approach from the ground up.<p>Our AI Code Detector is powered by span-detect-1, a state-of-the-art model trained on millions of AI- and human-written code samples. It detects AI-generated code with 95% accuracy, and ties it to specific lines shipped into production. Within the Span platform, it’ll give teams a clear view into AI’s real impact on velocity, quality, and ROI.<p>It does have some limitations. Most notably, it only works for TypeScript and Python code. We are adding support for more languages: Java, Ruby, and C# are next. Its accuracy is around 95% today, and we’re working on improving that, too.<p>If you’d like to take it for a spin, you can run a code snippet here (<a href="https:&#x2F;&#x2F;code-detector.ai&#x2F;" rel="nofollow">https:&#x2F;&#x2F;code-detector.ai&#x2F;</a>) and get results in about five seconds. We also have a more narrative-driven microsite (<a href="https:&#x2F;&#x2F;www.span.app&#x2F;detector" rel="nofollow">https:&#x2F;&#x2F;www.span.app&#x2F;detector</a>) that my marketing team says I have to share.<p>Would love your thoughts, both on the tool itself and your own experiences. I’ll be hanging out in the comments to answer questions, too.

[IDE/Editor] Launch HN: Rowboat (YC S24) – Open-source IDE for multi-agent systems Hi HN! We are Arjun, Ramnique, and Akhilesh, the founders of Rowboat (<a href="https:&#x2F;&#x2F;www.rowboatlabs.com">https:&#x2F;&#x2F;www.rowboatlabs.com</a>), an AI-assisted IDE for building and managing multi-agent systems with a copilot. Using Rowboat, you can build both deterministic automation agents (e.g. automatically summarizing emails) and more agentic systems (e.g. a meeting prep assistant or a customer support bot).<p>Here are some examples:<p>- Meeting-prep assistant: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=KZTP4xZM2DY" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=KZTP4xZM2DY</a><p>- Customer support assistant: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=Xfo-OfgOl8w" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=Xfo-OfgOl8w</a><p>- Gmail and Reddit assistant: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=6r7P4Vlcn2g" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=6r7P4Vlcn2g</a><p>Rowboat is open-source (<a href="https:&#x2F;&#x2F;github.com&#x2F;rowboatlabs&#x2F;rowboat" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;rowboatlabs&#x2F;rowboat</a>) and has a growing community. We first launched it on Show HN a few months ago (<a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43763967">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43763967</a>).<p>Today we are launching a major update along with a cloud offering. We’ve added built-in tool integrations for 100s of tools like Gmail, Github and Slack, RAG with documents and URLs, and triggers to invoke your assistant based on external events.<p>Our cloud version includes all the features of the open-source IDE, but runs instantly with no setup or API keys. For launch, we&#x27;re offering $10 free usage with Gemini models so you can start building right away for free without adding any card details. Paid plans start at $20&#x2F;month and give you access to additional models (OpenAI, Anthropic, Gemini, with more coming) and higher usage limits.<p>There’s a growing view that some tasks are better handled by single agents (<a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45096962">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45096962</a>), while others benefit from multi-agent systems for higher accuracy ( <a href="https:&#x2F;&#x2F;www.anthropic.com&#x2F;engineering&#x2F;multi-agent-research-system" rel="nofollow">https:&#x2F;&#x2F;www.anthropic.com&#x2F;engineering&#x2F;multi-agent-research-s...</a>). The difference often comes down to scope: a focused task like coding suits a single agent, but juggling multiple domains such as email, Slack, and LinkedIn is better split across agents. Multi-agent systems also help avoid context pollution, since LLMs lose focus when asked to handle unrelated tasks. In addition, cleanly dividing responsibilities makes each agent easier to test, debug, and improve.<p>However, splitting work into multiple agents and getting their prompts right is challenging. OpenAI and others have published patterns that work well for different scenarios (<a href="https:&#x2F;&#x2F;cdn.openai.com&#x2F;business-guides-and-resources&#x2F;a-practical-guide-to-building-agents.pdf" rel="nofollow">https:&#x2F;&#x2F;cdn.openai.com&#x2F;business-guides-and-resources&#x2F;a-pract...</a>). We’ve added agent abstractions, built on top of OpenAI’s Agents SDK, to support these patterns. These include user-facing agents that can decide to hand off to another agent when needed; task agents that perform internal tasks; and pipelines that deterministically call a sequence of agents.<p>Rowboat’s copilot (‘Skipper’) is aware of these patterns and has been seeded with tested patterns, such as a manager‑worker setup for a customer support bot, a pipeline for automated document summarization, and multi‑agent workflows for combining web search with RAG. It can:<p>- Build multi-agent systems from a high-level request and decide how work must be delegated across agents<p>- Edit agent instructions to make correct tool calls using Composio tools or any connected MCP server<p>- Observe your playground chat and improve agents based on your tests<p>We see agentic systems as a spectrum. On one end are deterministic workflows with a few LLM calls. On the other end are fully agentic systems where the LLM makes all control flow decisions - we focus on this end of the spectrum, while still allowing deterministic control where necessary for real-world assistant use cases. We intentionally avoided flowchart-style editors (like n8n) because they become unwieldy when building and maintaining highly agentic systems.<p>We look forward to hearing your thoughts!

[Other] Show HN: I wrote a from-scratch OS to serve my blog Hey HN! This is a fun&#x2F;educational project I built to learn OS programming. I started working on it right after graduating high school last year and have been working on it on and off during my first year of university. It features a TCP&#x2F;IP stack, an HTTP server, a RAM file system, a BIOS bootloader, paging and memory management, and concurrent tasks based on cooperative scheduling, along with a custom library. It&#x27;s written in a C programming style focused on safety (based on a custom library of core abstractions) that&#x27;s inspired by the writing of Chris Wellons (nullprogram.com).<p>There is a link to a test deployment in the README. The TCP&#x2F;IP implementation is nowhere near perfect, of course, so there may be issues loading the page. I&#x27;m curious how the system holds up if this post gets any attention ;-)

[Other] Awesome multilingual OCR and Document Parsing toolkits based on PaddlePaddle (practical ultra lightweight OCR system, support 80+ languages recognition, provide data annotation and synthesis tools, support training and deployment among server, mobile, embedded and IoT devices)

[Other] Automating Distro Updates in CI

[Other] Secure, updated & optimized dependencies Connect GitHub repos or upload dependency files to detect security vulnerabilities, outdated packages, and unused/missing dependencies. Supports JavaScript, Python, Go, Rust, PHP, and more.

[Other] AI Agents for Smart Contract Security AI marketplace for smart contract security audits. Specialized agents analyze code using database of 25K+ real vulnerabilities.

[Other] Stop iOS refund abuse — an open-source developer tool Refund Swatter Lite is an open-source developer tool designed to stop iOS in-app purchase refund abuse. It automatically handles App Store Server Notifications and lets developers securely control their Apple API keys without sending them to any third-party.