CMD CNTR | Web Engineer Experts

🥇America's Top Choice in Web Agencies🥇 ✨ Tips for Agency & Business owners around tech best practices ✨ 🗨️ Unhappy with your site? Let's chat 🗨️

[CMD CNTR | Web Engineer Experts @cmdcntr]

Your shop says AI is 10x productivity?
Ask them what they review.

[CMD CNTR | Web Engineer Experts @cmdcntr]

Onboarded a client last quarter.
Their dev was 5x faster with AI.
The codebase was a graveyard of half-reviewed PRs.

[CMD CNTR | Web Engineer Experts @cmdcntr]

We slowed his AI down.
Claude, Codex, Cursor on every PR.
Six weeks later: half the velocity. Twice the stability.

Nolan Lawson wrote up the same approach this morning: https://t.co/eQiC0bZ5Kg

[CMD CNTR | Web Engineer Experts @cmdcntr]

This is what the post-Axios, post-fsnotify, post-TanStack npm looks like.

Your dev should know about it by now. If they don't, the next supply chain story is the one with your site in it.

https://t.co/rg5PyEl5f5

[CMD CNTR | Web Engineer Experts @cmdcntr]

For 15 years, npm publish was a single command and a vibe.

This week npm shipped staged publishing GA. Packages now queue, require a 2FA approval, and surface in the npm CLI before they go live.

The era of unconscious publishing is over.

[CMD CNTR | Web Engineer Experts @cmdcntr]

The boring answer is the right answer.

That client stayed on Node 24 LTS with pinned lockfiles and current patches.

Their site still loads at 3am on a Saturday. That's the whole point.

[CMD CNTR | Web Engineer Experts @cmdcntr]

Every six months a client asks me to migrate to the new hot runtime.

Last quarter it was Bun. The pitch was faster installs, and the DX was real.

Yesterday yt-dlp dropped Bun and called the recent rewrite "vibe-coded."

[CMD CNTR | Web Engineer Experts @cmdcntr]

The actual technical reason yt-dlp gave: older Bun versions bypass the ejs lockfile.

That's the kind of bug that doesn't show up in benchmarks. It shows up when someone hijacks a transitive dependency.

https://t.co/TGSZqBeKKf

[Rohan @rohan360d]

@fidexcode I am not seeing any stage of wordpress development need github.

[Abhijit @abhijitwt]

Babe wake up

Another supply chain attack just hit 700+ GitHub repositories, including PHP and Node.js projects

[Peter Dove @ElectronDev]

One of this week's steps: Dramatically improve https://t.co/lRcwtavHtg landing page. Worked through @viktoroddy training. I work in AI and was still underestimating what's possible. He gave me the workflow and resources I was missing. Most of us are still thinking too small.

[Jakub Antalik @Jakubantalik]

Comparison demo without and with the Transitions skill

Demo page with more details, usage and commands
https://t.co/nuaxB4Xo4n
npx skills add jakubantalik/transitions.dev

[Okara @askOkara]

Reddit marketing agencies right now:

[CMD CNTR | Web Engineer Experts @cmdcntr]

That gap is the new attack surface.

The fix is a written SLA and someone who answers the email when it lands.

https://t.co/5NH7muufB1

[CMD CNTR | Web Engineer Experts @cmdcntr]

The 90-day disclosure window is now a liability.

Anthropic just published 30 days of Glasswing data. Mozilla saw a 10x jump in vulns identified per Firefox release.

Your $30/hr freelancer's patch queue did not get any faster.

[Elon Musk @elonmusk]

T-zero is currently 5:30 Texas time

[Shelpid.WI3M @Shelpid_WI3M]

Nobody believed a guy with zero 3D experience could land clients on Fiverr.

He proved them wrong in the first week.

He opened Blender for the first time. Stared at the screen. Closed it.

Opened Claude instead. Typed out exactly what his client needed a forest environment, full scene, rendered and ready.

Claude gave him a Python script. He pasted it into Blender. Hit run.

Trees. Lighting. Ground texture. The whole scene built itself.

54,000 people have already seen what this looks like in action. The video went viral because nobody could believe it was real.

But it is.

Product mockups. Game assets. Architectural renders. He takes the brief, describes it to Claude, and Blender does the rest.

Clients on freelance platforms don’t care how it got made. They care that it looks good and arrives on time.

Both boxes checked.

First month he made $2,500. Second month $4,800. Now he turns down projects that don’t hit his minimum.

A forest environment that would take a senior 3D artist a full day he delivers before lunch.

No courses. No YouTube tutorials. No years of practice.

Just Claude, Blender, and one guy who decided to try something most people thought was impossible.

The window is open. Not for long.

[CMD CNTR | Web Engineer Experts @cmdcntr]

300+ packages were hijacked in Mini Shai-Hulud. antv. timeago.js. Names you've shipped.

Your audit isn't "we use Renovate." It's:
- ignore-scripts in CI
- snapshot lockfiles
- review every postinstall hook

https://t.co/sL5ZU00f2F

[CMD CNTR | Web Engineer Experts @cmdcntr]

Hot take: "just pin your dependencies" was always a fantasy.

If you ran `npm install` on any project last quarter, you executed code from people you'll never meet.

The RFC making install scripts opt-in is two years late.

[Okara @askOkara]

if your startup is not showing up in chatgpt, do this:

> go to https://t.co/8b7IyKwzJR
> drop your website url
> it runs the exact prompts your customers type into llms
> it studies why competitors get cited and you don't
> it gives you high-priority fixes to help you get cited in chatgpt