Devlin Duldulao

1.4K posts

Devlin Duldulao banner
Devlin Duldulao

Devlin Duldulao

@devlinduldulao

🇵🇭🇸🇯 • engineer at https://t.co/w5ZIJy6RUi • trainer at https://t.co/zsjNvLIfoN • published book author at https://t.co/56Fh3p1sh5

Oslo, Norway Katılım Mart 2013
2.9K Takip Edilen1.3K Takipçiler
Sabitlenmiş Tweet
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Thanks, @voxxed_thess, for taking this photo. My books are already outdated, but they look good here. And I look like a local rapper from Manila. 😆 😎
Devlin Duldulao tweet media
Oslo, Norway 🇳🇴 English
1
0
10
3.3K
Devlin Duldulao retweetledi
Aurora Scharff
Aurora Scharff@aurorascharff·
Your tools could be confusing your agents and you'd never know. I've been having my agents friction log confusing moments as they build Next.js apps. • Tags every step smooth, friction, or blocked • Shows what the agent fell back on when it got stuck • Turns each friction point into a concrete fix
Aurora Scharff tweet media
English
2
2
15
808
Devlin Duldulao retweetledi
ReactAlicante ⚛️🌞🥘
In this workshop, @devlinduldulao will share the workflow behind building a large-scale React app while writing only a minimal part of the codebase. Explore how strategic tooling with TanStack Query, TanStack Router, HeyAPI, and AI coding agents can unlock a new level of productivity. reactalicante.es
ReactAlicante ⚛️🌞🥘 tweet media
English
0
2
8
257
TANSTACK
TANSTACK@tan_stack·
SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.
English
134
981
3.8K
3.8M
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
I noticed something about AI coding model pricing. It follows the iPhone pattern. New model drops → previous model gets cheaper → that cheaper model is still incredibly capable. You don't need the latest to ship great code. You need the right 1 for the right price. Agree😅?
English
1
0
1
139
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
I'm on vacation and eating here at FiveGuys, but I can't help myself to remind engineers @aurorascharff . 😂
English
1
0
1
103
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
A reminder for every engineer building mission-crit apps: Regional redundancy isn’t optional. A single point of failure will find you eventually. One AWS zone went down. Failures spread. Trading stopped. Design for failure before failure designs your incident report. #coinbase
English
1
0
2
193
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Outstanding job by the whole @g2i_co crew at @ReactMiamiConf for organizing such an amazing event. I highly recommend it for learning and networking with some of the best React developers in the community. Will definitely be back next year 🫶🏼 Peace out.
Devlin Duldulao tweet media
English
1
1
11
464
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
We used to debate tabs vs spaces. Bad actors are now using LLMs to scan enterprise apps for vulnerabilities at scale. Maybe it's time we care more about security than code formatting. Prioritize security. Not as an afterthought — as a foundation. ✊
English
0
0
1
98
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Copilot is moving to usage-based billing, so token usage will matter more. Caveman mode might help a little by making AI replies shorter, but the bigger savings will come from lighter models, fewer attached files, fewer agent retries, etc. Need to stop being so triggerhappy now😂
English
0
0
7
278
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Speaking at @kc_dc in September! 🎙️ I'll be showing a Microfrontend architecture using @rspack_dev 2.0 with streaming and Suspense. If you're on a big React team and struggling with codebase complexity — this one's for you 🫵 kcdc.info
English
1
0
11
350
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Excited to run a @tan_stack Query + Hey API workshop @mrlubos at @ReactAlicante on Sept 24 🚀 Codegen, AI prompting, AGENTS.md, SKILL.md — all real-world, production-ready stuff 💪.
English
2
1
17
568
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Me: Preparing for a virtual React bootcamp for the coming week. Her @aurorascharff: Preparing for an in-person React workshop for the coming week. 🤓
Devlin Duldulao tweet media
English
3
2
81
4.3K
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
The best time to adopt a technology is before people stop laughing at it.
English
0
0
1
127
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
8 years ago, I asked two frontend developers on another team if they were using TypeScript in their new project. They laughed at me and said they don't have time to use "that garbage." Today, TypeScript is the #1 most-used language on GitHub.
English
7
0
18
1.7K
Devlin Duldulao retweetledi
Lubos @heyapi.dev
Lubos @heyapi.dev@mrlubos·
Thank you to @devlinduldulao for featuring Hey API in this talk at React Miami 🏝️
Lubos @heyapi.dev tweet media
English
0
1
4
192
Devlin Duldulao
Devlin Duldulao@devlinduldulao·
Live coding again. I think I should do the same for tomorrow. 😏
Devlin Duldulao tweet media
English
0
0
2
145