Signup here for the newsletter to get the weekly digest right into your inbox.
Find the 15 highlighted links of weeklyfoo #162:
Why and how to port your entire codebase to Rust
by Ryan Peterman
Microsoft Distinguished Engineer Stephen Toub on rewriting the 400,000-line GitHub Copilot runtime in Rust with agents, rollout strategy and catching regressions
🚀 Read it!, rust, ai, rewrites
Frontier quality at 1% of the cost
by Airbnb Engineering
Airbnb fine-tuned a 2B-parameter model to match frontier models on a production policy classifier at 35 ms median latency
📰 Good to know, ai, llm, performance
Inside GitHub's new Git storage architecture
by GitHub Blog
Rubicon separates immutable Git objects in blob storage from a replicated reference log so compute and storage scale independently
📰 Good to know, git, architecture, ai
Design systems should be fast by default
by Den Odell
Timing ten design systems on a 249-option dropdown and 100 checkboxes, tracing slow paths and adding Playwright performance budgets per PR
📰 Good to know, performance, design-systems, testing
Nothing installs at our company until it's a week old
by Bruno J
A company-wide registry proxy delays new npm and PyPI releases by seven days so malicious versions get caught first
📰 Good to know, security, npm, supply-chain
Cross-request KV cache exposure in Workers AI
by Cloudflare
155 GLM-5.3 responses exposed other customers' data after a KV cache capacity mismatch met an SGLang error-handling bug
📰 Good to know, security, ai, postmortem
Why agents are soon only going to have 1 tool
by Philipp Schmid
Agents collapse their tool catalog into one exec tool so models write short scripts that chain dependent actions in a sandbox
📰 Good to know, ai, agents
Why is this fingerprinting script creating bioweapons
by Veritas
A canvas fingerprinting script names identifiers after taboo topics and hides a prompt in invisible Unicode so LLMs refuse to analyze it
📰 Good to know, security, javascript
Polymarket's CSP allowed a third-party script swap to drain wallets
by Scott Helme
A script URL that stayed the same but changed payload got past CSP, and what would have stopped it.
📰 Good to know, security, csp, third-party-scripts
Parcel 3 alpha, a Rust rewrite
by Parcel team
Parcel rewritten in Rust as a single small binary with no Node dependency and up to 100x faster cold builds
📰 Good to know, bundlers, rust, performance
OmniDiff
by ivankovic
Content-aware diffs for code, images, fonts, archives and PDFs with a TUI viewer, Git integration and JSON output for CI
🧰 Tools, cli, git, tooling
djs
by Armin Ronacher
JavaScript engine in Rust for agent scripts in WebAssembly, VM state snapshots resume elsewhere even mid-await
🧰 Tools, javascript, wasm, agents
Melange
by Melange
Compiles OpenFGA authorization models into PL/pgSQL so a permission check is a SELECT, with no separate service.
🧰 Tools, postgres, security, authorization
Reticle
by Reticle Labs
Dev-only SDK and MCP server that lets coding agents drive your running app and return a pass, fail or cannot-tell verdict
🧰 Tools, ai, agents, testing, mcp
devvm
by devvm
Runs coding agents in a VM with only the project folder mounted and network traffic going through an allowlist proxy
🧰 Tools, ai, agents, security, sandboxing
Want to read more? Check out the full article here.
To sign up for the weekly newsletter, visit weeklyfoo.com.
