// writing

Posts tagged #tooling — Page 2

A mix of technical deep-dives, career reflections, and dispatches from the road.

GraphQL @oneOf: Exactly One Input, Enforced by the Schema thumbnail

developmentSep 13, 2026· 3 min

GraphQL @oneOf: Exactly One Input, Enforced by the Schema

OneOf Input Objects landed in the September 2025 GraphQL spec, which means the exactly-one-of-these-arguments rule you've been enforcing in resolver code is…

node --test: The Test Runner You Already Have Installed thumbnail

developmentSep 10, 2026· 3 min

node --test: The Test Runner You Already Have Installed

Node's built-in test runner has been stable since v20 and now handles mocking, coverage, watch mode, and TypeScript files.

Trusted Types Is Baseline: DOM XSS Is Now a Type Error thumbnail

developmentAug 10, 2026· 3 min

Trusted Types Is Baseline: DOM XSS Is Now a Type Error

Firefox 148 shipped Trusted Types in February 2026, making it Baseline. Here's how to turn every dangerous innerHTML assignment in your app into a TypeError…

GraphQL Trusted Documents: Stop Letting Strangers Write Your Queries thumbnail

developmentAug 6, 2026· 4 min

GraphQL Trusted Documents: Stop Letting Strangers Write Your Queries

Disabling introspection is not security. Trusted documents let your server execute only the operations your own developers wrote, and you probably already…

The Sanitizer API: Safe HTML Injection Without DOMPurify thumbnail

developmentAug 2, 2026· 3 min

The Sanitizer API: Safe HTML Injection Without DOMPurify

The browser can now strip XSS from an HTML string during parsing. Here's how setHTML works, why its config can only narrow the allowlist, and how to ship it…

Laravel 13 PHP Attributes: Config That Lives With Your Code thumbnail

developmentJul 30, 2026· 3 min

Laravel 13 PHP Attributes: Config That Lives With Your Code

Laravel 13 expands first-party PHP attributes across controllers, authorization, and queued jobs. Here is what actually changed, and where attributes are…

CSS @function: Reusable Logic Comes Native to the Browser thumbnail

developmentJul 19, 2026· 3 min

CSS @function: Reusable Logic Comes Native to the Browser

CSS finally has real, reusable functions. The new @function at-rule lets you define typed helpers that run in the browser with live values — here is how it…

Fallow: A Codebase Truth Layer for Agent-Written Code thumbnail

developmentJul 1, 2026· 4 min

Fallow: A Codebase Truth Layer for Agent-Written Code

Fallow is a Rust-native tool that maps your whole TS/JS codebase to catch dead code, duplication, and architecture drift.

Building a Claude Code Status Line With Usage Bars and a Clickable Repo thumbnail

developmentJun 29, 2026· 3 min

Building a Claude Code Status Line With Usage Bars and a Clickable Repo

A walkthrough of a custom Claude Code status line that renders context and rate-limit usage as colored bars and turns your repo name into a clickable link.

// the newsletter

Don't miss the next one