#dependency vulnerability
119 related articles
·6 min
The New Normal of AI Programming: How Autonomous Agent Development Is Reshaping Software Engineering
AI Agent autonomous programming is evolving from niche experiments to the industry default. This article analyzes the three stages of AI-assisted programming, its impact on developer skills, process restructuring, and key challenges.
Read more →
6 Free GitHub Security Settings Every …
·4 min
6 Free GitHub Security Settings Every Maintainer Should Enable
GitHub offers 6 free security settings for open source maintainers: 2FA, Dependabot alerts, secret scanning, branch protection, permission reviews, and code scanning. Configure once, benefit long-term.
Read more →
·3 min
CodeRabbit vs DeepSource vs Greptile: In-Depth Comparison of AI Code Review Tools
In-depth comparison of CodeRabbit, DeepSource, and Greptile — three leading AI code review tools analyzed across context understanding, static analysis, and architecture awareness to help teams choose the right solution.
Read more →
·3 min
Agent PR Governance: Five New Rules for AI Code Review
Explore the five core dimensions of GitHub Copilot's Agent PR governance framework: validation, review depth, repo instructions, attribution, and release-note accountability for AI code review.
Read more →
·3 min
Trae IDE in Practice: Building a Student Management System from Scratch with AI Conversational Programming
A detailed walkthrough of using ByteDance's Trae IDE to build a student management system from scratch through hand-drawn prototypes and AI conversation, covering page generation and code analysis.
Read more →
·3 min
OpenAI Launches Open Source Vulnerability Detection Initiative: Using AI to Safeguard Open Source Security
OpenAI launches an open source vulnerability detection initiative using LLM technology to help the open source community find and fix software vulnerabilities, competing with Google and Microsoft in AI security.
Read more →
·3 min
Claude Code Source Code Leak: 500,000 Lines of Code Reveal Core Multi-Agent Architecture Design
Anthropic accidentally leaked 500K+ lines of Claude Code TypeScript source via a Source Map misconfiguration, revealing its Coordinator multi-agent architecture, Kairos prediction system, and shadow rollback mechanism.
Read more →
·4 min
Deep Dive into Six AI Development Tools: Loop Recipe Library, Vercel Agent Framework, and More
Deep analysis of Loop workflow recipes, Vercel's open-source Agent framework, Pyker AI-native project management, Arrow P2P tool, DBX database client, and NVIDIA's Skill Spectre security tool.
Read more →
·2 min
Devin Review Security Audit Feature Explained: How AI Code Review Detects Deep Security Vulnerabilities
Devin Review adds AI security audit to auto-detect auth bypasses, logic flaws & deep vulnerabilities in every PR, with full remediation from finding to fix.
Read more →
·3 min
AI Daily Brief: Codex Cross-Host Sessions, Claude Code Quota Reset, AlphaFold Lead Joins Anthropic
June 20 AI Brief: OpenAI Codex adds cross-host session handoff, Claude Code fixes 3% user quota bug, AlphaFold lead John Jumper leaves DeepMind for Anthropic, EU bets on 400B-param open-source model.
Read more →
·3 min
Stop Writing Prompts by Hand: Let AI Agents Prompt Themselves
Deep dive into the AI coding paradigm shift: from hand-crafted prompts to self-prompting agent loops. Learn how agent self-review and proactive context fetching enable scalable, high-quality AI coding.
Read more →
·2 min
Replit's Domain-Specific Agents: One-Click Batch Fixes for SEO and Security Vulnerabilities
Deep dive into Replit's domain-specific AI Agents: Growth Agent for SEO issues and Security Agent for vulnerability detection, with select-all one-click batch fixing.
Read more →
·4 min
A Complete Guide to Multi-Agent Teams in AI Coding: From Solo Work to Team Collaboration
Deep dive into multi-agent solutions from Cursor, Claude Code, and Tencent CodeBuddy — covering parallel exploration, cross-layer collaboration, context isolation, practical tips, and selection guide.
Read more →
·2 min
Claude Proactively Discovers Bugs in an Open-Source Library: AI Evolves from Coding Assistant to Collaborator
Simon Willison releases asyncinject 0.7, fixing bugs proactively discovered by Claude. This case shows AI evolving from passive coding assistant to active code reviewer and collaborator.
Read more →
·4 min
The Complete AI Agent Engineering Tech Stack: A Practical Guide to 100x Development Efficiency
Deep dive into the AI agent engineering stack: from Cursor framework, model selection to context engineering and automated review loops — a complete workflow guide to achieving 100x development efficiency.
Read more →
·2 min
GitHub May 2026 Availability Report: A Comprehensive Analysis of Nine Service Degradation Incidents
GitHub's May 2026 availability report reveals nine service degradation incidents. This article analyzes the frequency, historical trends, developer impact, and platform reliability implications.
Read more →
·2 min
Replit Partners with Socket Security to Defend Against Supply Chain Attacks: A New Security Paradigm for the AI Era
Replit partners with Socket Security for platform-level defense against supply chain attacks. Learn how AI agents amplify attack surfaces and how real-time detection protects developers.
Read more →
·4 min
MCP Hands-On Tutorial: Using AI to Automate Reverse Engineering of JS Encryption Algorithms
A detailed guide on MCP protocol setup and hands-on workflow showing how AI can automatically locate encrypted APIs, analyze obfuscated JS, set breakpoints, and restore sign algorithms to generate Python scraper code.
Read more →
·3 min
Claude Code Enterprise E-commerce in Practice: A Methodology for Taking AI Programming from Demo to Industrial-Grade
A deep dive into engineering methodology for enterprise e-commerce development with Claude Code and Harness AI, covering architecture, code quality, and CI/CD practices.
Read more →
·3 min
rsync Hit by AI Code Invasion: 36 Commits Trigger Open Source Infrastructure Trust Crisis
After rsync maintainer used Claude AI for 36 code commits, incremental backup functionality broke. Alpine Linux and Debian discuss rollbacks, exposing deep tensions between AI code quality and open source maintenance.
Read more →