Migrating Off Google Analytics: Umami vs Plausible vs FathomThe wake-up call I didn't ask for Last week the TanStack folks reported what appears to be a compromise affecting some of their NPM packages (the details are still being sorted out in issue #7383 — read it yourself before drawing conclusions). I won'...1May 12 · 5 min readalan-west.hashnode.dev
How to verify AI-discovered vulnerabilities aren't just training data echoesThe setup Last month a friend DM'd me a screenshot. An AI security agent had "discovered" a vulnerability in a popular open-source project. The agent walked through exploitation steps, suggested a patch, the whole nine yards. Looked legit. Then someo...11MMay 12 · 5 min readalan-west.hashnode.dev
TokenSpeed and the Quiet Race to Make LLM Inference BoringAnother inference engine? So TokenSpeed is trending on GitHub this week, billing itself as a "speed-of-light LLM inference engine." I clicked through expecting either a vLLM clone or another Rust rewrite of llama.cpp. I haven't run it in production y...1May 11 · 6 min readalan-west.hashnode.dev
Bun, Zig, and Rust: What the Rewrite Rumor Means for Your StackA surprising headline (with caveats) Last week a tweet from Jarred Sumner — Bun's creator — made the rounds claiming a Zig-to-Rust rewrite is passing 99.8% of the testsuite. I haven't been able to independently verify this through Bun's official rele...May 11 · 6 min readalan-west.hashnode.dev
Why your AWS bill exploded overnight and how to actually fix itThe 3 AM Slack message every developer dreads Last month I got pinged at 3 AM because our cloud bill had tripled in 24 hours. No new deployments. No traffic spike. Just a number that climbed while everyone slept. If you've spent any time on a major c...May 11 · 5 min readalan-west.hashnode.dev