Demonchy Vincent

R&D Director @Kizeo for 11 years · PHP, Laravel, AWS · Building · Writing about dev & architecture on my blog

[Demonchy Vincent @DemonchyVincent]

The first article answers the only questions that matter at the start:

What exactly is YOUR tenant? Org, team, or user? (When in doubt, pick the highest level. Going down is easy, going up hurts.)

Do you even need it? One question: what does a data leak between two customers cost you?

Why now? At project start it's a few hours. In mature production it's a multi-quarter project.

https://t.co/of5Ckky7gp

[Demonchy Vincent @DemonchyVincent]

200 customers in the same table, and a client_id column you must never, ever forget in the WHERE clause.

If that sentence makes you sweat, you've met the problem: a B2B SaaS that grew without ever deciding on multitenancy.

Last year I gave a talk on this at @afup 's Forum PHP. The hallway chats (including with @freekmurze of Spatie, whose multitenancy package I'll dig into later in the series) convinced me to turn it into articles.

It only took me a year. For a series about doing things early, better late than never. 🧵

[Pushpak @pushpak1300]

🔥🔥 MCP integration coming soon to AI SDK 🔥🔥

[Demonchy Vincent @DemonchyVincent]

The pace went from "one major npm/registry compromise every 2 years" to "one per month":

• Axios (Mar 2026): 70M weekly downloads, multi-OS RAT, attributed to a North Korean state actor.
• Nx Console (May 2026): 11 minutes live on the VS Code marketplace was enough to siphon credentials and exfiltrate ~3,800 private repos.
• Shai-Hulud (Sep 2025): first self-replicating npm worm. 500+ packages compromised, including CrowdStrike's.

Why your usual tools won't catch them, and what actually works: https://t.co/YcQ0AU60Iz

[Demonchy Vincent @DemonchyVincent]

"I wasn't affected, I wasn't working at 12:30 a.m. when it happened."

A developer told me this about a recent supply chain attack on a library his entire stack depends on.

He may have dodged that one. But that's not what kept him safe. So I wrote about it.

[Demonchy Vincent @DemonchyVincent]

@laravelphp It lures attackers scanning for /wp-admin, phpMyAdmin...
captures their payloads, auto-bans them, and fires Laravel events
so you can alert yourself however you want.

Simple install. No headache.

👉 https://t.co/WW109NP6wA

#Laravel #PHP #Security #OpenSource

[Demonchy Vincent @DemonchyVincent]

I just open-sourced NotTodayHoney, a @laravelphp honeypot package 🍯

I built it for my smaller projects. I was tired of having solid security tooling at work and basically nothing at home.

I wanted the same "someone is poking around" awareness, without the setup headache.

[Patricio @PatricioOnCode]

Hey friends..... silent release because YOLO... 😃

I'm since forever to prepare all the details, so I figure it's time.

MingleJS is here!

Feedback = ❤️

Link in the next post 👇

[Demonchy Vincent @DemonchyVincent]

@freekmurze One key problem with most libs merging PDFs is that they tend to transform content into images in the process. Thus, losing links and easy text extraction.
I use Gotenberg to solve this issue, but I don't think it can be easily implemented in a PHP lib.

[Taylor Otwell @taylorotwell]

Today's Laravel release (8.75.0) is now available!

🏝️ This marks the stable release of our "API" scaffold for Laravel Breeze and Next.js reference implementation: https://t.co/djVWjUOw8q

📝 Fulltext indexes may now be created in your migrations (MySQL / Postgres)

[Demonchy Vincent @DemonchyVincent]

#Kizeo est présent aujourd'hui sur le forum @_foceen dans le but de chercher les futurs talents qui composeront nos équipes de demain. Rdv stand 38 !

[Demonchy Vincent @DemonchyVincent]

Début de la journée à l'#AWSSummit de l'équipe Kizeo ! On est prêt pour la keynote !

[Demonchy Vincent @DemonchyVincent]

Aujourd'hui #Kizeo est à la préfecture de Marseille pour un Job Dating avec #Code4Marseille. Objectif : rencontrer les jeunes développeurs de la région et découvrir leurs formations !

[Demonchy Vincent @DemonchyVincent]

Merci aux étudiants du CERI pour leur attention ! J'ai adoré participé à cette présentation.

[Kizeo @kizeo]

Début octobre nos développeurs ont présenté aux 80 étudiants du master « Ingénieur logiciel » du CERI le métier de développeur Full Stack 🎓👉 https://t.co/yowbvlOWJB

#Avignon #CERI #FullStack

[Vilmus Régis @RegisVilmus]

KIZEO est rentrée en 2018 comme solution de citizen dev dans les EPIC de SNCF.
Une opportunité de booster l'innovation et favoriser le déploiement rapide de formulaires de collecte de données en mobilité.

[AWSonAir @AWSonAir]

L’équipe @aws_actus vous dit à l’année prochaine pour l’#AWSSummit Paris 🇫🇷. Merci aux participants, sponsors et partenaires pour une édition 2018 mémorable !

[Demonchy Vincent @DemonchyVincent]

Début de la keynote d'ouverture de l'#AWSSummit à Paris ! @kizeo @AWSonAir

[Kizeo @kizeo]

#CES 2018 : présents sur le salon, nous vous avons sélectionné 5 nouveautés des plus surprenantes et ingénieuses ! #Kizeo https://t.co/ta2cemJ4jk

[Demonchy Vincent @DemonchyVincent]

Dernier jour au #CES2018 pour #Kizeo. L'occasion de faire le tour des innovations primées de cette année ! À bientôt Vegas !

[Demonchy Vincent @DemonchyVincent]

Troisième jour de #CES2018 pour #Kizeo. Personnellement très impressionné par les innovations dans les transports proposées par #HEREatCES et #Hyperloop !