Software development
fromInfoQ
2 days agoGitHub Copilot CLI Reaches General Availability
GitHub's Copilot CLI is now generally available, enhancing AI-assisted development in software through natural language commands and autonomous workflows.
#github-flavored-markdown
#github-flavored-markdown
[ follow ]
#github #open-source #software-development #documentation #github-copilot #visual-studio-code #markdown
Node JS
fromDEV Community
3 weeks agoI Scanned 10 Popular GitHub Actions Workflows for Undocumented Environment Variables. Here's What I Found.
Many popular JavaScript projects have undocumented environment variables in their GitHub Actions workflows, leading to potential issues for developers forking these projects.
JavaScript
fromDEV Community
4 weeks agoI Built an npm Package and Tracked Every Download for Two Weeks. Here's the Data.
textlens, a zero-dependency text analysis toolkit, achieved 977 downloads in week one but dropped 94% to 63 downloads in week two, settling at 16 daily downloads versus competitors' 2,100 daily downloads.
#github-copilot
Node JS
fromgithub.com
4 weeks agozahhar/ghcp-dashboard: Dashboard with Github Copilot Metrics
A lightweight Node.js dashboard aggregates GitHub Copilot usage metrics via REST API to display team adoption patterns, user engagement, and model/IDE preferences through a browser-based leaderboard interface.
Artificial intelligence
fromZDNET
1 month agoWhy AI is both a curse and a blessing to open-source software - according to developers
AI can benefit open source when properly applied for security analysis, but causes harm when generating low-quality automated bug reports that overwhelm maintainers with false positives.
Software development
fromMedium
3 weeks agoFrom Concept to Production: The Complete Guide to XML Prompt Engineering for Software Developers
Treat LLMs as compilers, not chatbots, using Structured XML Prompting to generate professional-grade code through a five-stage AI-assisted development cycle with rigid constraints.
fromTechzine Global
1 month agoGo developer questions effectiveness of Dependabot
Dependabot sounded the alarm on a large scale. Thousands of repositories automatically received pull requests and warnings, including a high vulnerability score and signals about possible compatibility issues. According to Valsorda, this shows that the tool mainly checks whether a dependency is present, without analyzing whether the vulnerable code is actually accessible within a project.
Information security
React
fromGitHub
2 months agoGitHub - brucetoo/visual-agentic-dev: an immersive browser development environment designed to allow developers to complete code modifications, debugging, and command-line interactions without leaving the browser.
An immersive zero-config browser development environment enables direct in-browser React element selection, AI-driven code edits, and multi-project terminal integration.
#ai-code-review
Software development
fromTechCrunch
1 month agoAnthropic launches code review tool to check flood of AI-generated code | TechCrunch
Anthropic launched Code Review, an AI tool integrated into Claude Code to automate pull request reviews and address bottlenecks created by increased code generation from AI-assisted development.
fromSecurityWeek
2 months agoVS Code Configs Expose GitHub Codespaces to Attacks
It allows developers to test code, review pull requests, and more, but also exposes them to attacks via repository-defined configuration files, Orca says. "Codespaces is essentially VS Code running in the cloud, backed by Ubuntu containers, with built-in GitHub authentication and repository integration. This means any VS Code feature that touches execution, secrets, or extensions can potentially be abused when attackers control the repository content," the cybersecurity firm notes.
Information security
fromhttps://daniel.feldroy.com
2 months agoWriting tools to download everything
Using AI to help download photos so we can consolidate all our images into one place. Over the years, [Audrey](https://audrey.feldroy.com) and I have accumulated photos across a variety of services. Flickr, SmugMug, and others all have chunks of our memories sitting on their servers. Some of these services we haven't touched in years, others we pay for but rarely use. It was time to bring everything home.
Python
Software development
fromInfoQ
1 month agoGitHub's Points to a More Global, AI-Challenged Open Source Ecosystem in 2026
Open source faces unprecedented scale with 36 million new developers joining GitHub in 2025, requiring formal governance structures and strategies to manage AI-generated low-quality contributions.
Software development
fromGitHub
2 months agoGitHub - antonreshetov/bumpy: Zero-config, Git-powered versioning for monorepos
Bumpy provides zero-config, Git-driven versioning and changelog generation for monorepos, using workspace detection, Conventional Commits, tag-based boundaries, and dry-run support.
fromTheregister
2 months agoVS Code for Linux may be secretly hoarding trashed files
The reason for this is Snap - a Linux application packaging format - creates a local Trash folder for each VS Code version, one that's separate from the system-managed Trash, according to a VS Code bug report dating back to November 11, 2024. Not only that, but Snap keeps older versions of VS Code after updates, potentially multiplying the number of local Trash folders and the trashed-but-not-deleted files therein. Emptying the system Trash folder doesn't affect the local instances.
Software development
fromTechCrunch
1 month agoFor open-source programs, AI coding tools are a mixed blessing | TechCrunch
AI coding tools have caused as many problems as they have solved, according to industry experts. The easy-to-use and accessible nature of AI coding tools has enabled a flood of bad code that threatens to overwhelm projects. Building new features is easier than ever, but maintaining them is just as hard and threatens to further fragment software ecosystems. The result is a more complicated story than simple software abundance.
Software development
[ Load more ]