AI coding tools hid 15 GB on my Mac. unclog found it
unclog is a free CLI that finds the caches, logs and orphaned processes AI coding tools leave behind. Here is how to install and use it.
Wed Oct 28 2026 · 11 min read · 3 views
Software
Laravel's RateLimited job middleware failed 240 of 300 jobs
Laravel's RateLimited job middleware protected a small tenant from a noisy one, and it also failed 240 of the noisy tenant's 300 jobs. In my lab, a limit of 20 jobs per second kept the small tenant's
Sat Oct 24 2026 · 9 min read · 1 views
Cashier locks customers out on day 0 of the retry window
Laravel Cashier locks customers out on day 0 of Stripe's retry window. The first failed renewal moves a subscription to pastdue, and Cashier's valid() returns false from that moment. Stripe's
Sat Oct 24 2026 · 9 min read · 1 views
Cashier upgrades bill late and can lock customers out
Laravel Cashier's default swap() and updateQuantity() calls do not charge a customer for an upgrade today. They send prorationbehavior=createprorations, so Stripe adds the charge to the next renewal
Sat Oct 24 2026 · 9 min read · 1 views
Seat vs usage vs flat pricing for a Laravel SaaS, modeled
For a solo Laravel SaaS where customers differ a lot in how much they use, a hybrid plan is the safest default: a base fee that includes some usage, then a metered rate above it. In a 1,000-customer
Sat Oct 24 2026 · 9 min read · 1 views
Laravel Stripe webhooks credited 5x. An inbox table fixed it
Stripe delivers each webhook at least once, so a Laravel handler that credits an account on every delivery credited 5x in my lab, once per retry. In a lab with 20 paid invoices and 5 deliveries of
Sat Oct 24 2026 · 9 min read · 1 views
Laravel tenant scopes leaked in 5 of 7 paths. RLS closed all of them
Laravel tenant scopes built on a tenantid global scope do not isolate tenants. In a lab with 200,000 invoice rows across 100 tenants, the scope leaked all 200,000 rows in 5 of 7 common query paths.
Sat Oct 24 2026 · 10 min read · 1 views
Postgres 18 in Docker won't start? Change the mount path
If the official postgres:18 image exits with "Error: in 18+, these Docker images are configured to store database data in a format which is compatible with pgctlcluster", mount your volume at
Fri Oct 23 2026 · 11 min read · 13 views
Node.js October 2026 security release: all 10 CVEs ranked
Upgrade to Node.js 26.12.1, 24.22.1 or 22.23.4 this week, and rebuild any snapshot or single executable binaries afterwards. The October 21, 2026 release fixed ten CVEs. Four are rated high, three
Thu Oct 22 2026 · 10 min read · 61 views
Is your PHP vulnerable to CVE-2026-109618? A setup check
Yes, if you run PHP 8.5 below 8.5.12, 8.4 below 8.4.27, 8.3 below 8.3.36 or 8.2 below 8.2.35, and you serve web requests. PHP released those fixed versions on October 21, 2026 to close two critical
Thu Oct 22 2026 · 10 min read · 5 views
Node.js Brotli CVE-2026-111497: is your app exposed?
Upgrade to Node.js 26.12.1, 24.22.1 or 22.23.4, then check whether your code decodes Brotli data it did not produce. CVE-2026-111497 is a Brotli decoder flaw that Node.js rates high and says permits
Thu Oct 22 2026 · 10 min read · 513 views
Autocomplete in Node: a 1.4 GB trie loses to a 0.8 MB table
A trie with precomputed results answers autocomplete in 0.04 microseconds, and it used 1.4 GB of memory for 300,000 phrases. A 0.8 MB lookup table for prefixes of up to three characters matched that
Thu Oct 22 2026 · 10 min read · 1 views
PgBouncer: 19x faster connects, but half the throughput
PgBouncer made connect-per-request traffic 19x faster in our Postgres 18 lab, and it also cut the throughput of 200 busy clients roughly in half. Both results are true at once. A pooler removes the
Thu Oct 22 2026 · 11 min read · 1 views
Python 3.15 free-threaded: 3.8x faster, but 85% of counts lost
Python 3.15's free-threaded build ran pure-Python work 3.8x faster on 8 threads, and the standard build ran it 1.0x. The same build also lost 85% of the increments to an unlocked shared counter, where
Thu Oct 22 2026 · 11 min read · 1 views
Idempotency keys: check-then-insert double-charged 216 times
The most common idempotency design, "look up the key, and if it is missing do the work and store it", double-charged 216 times in our lab when 1,000 payments were each retried five times at once. A
Thu Oct 22 2026 · 12 min read · 2 views
Top 10 of 1M items in Node: sort is 88x slower than a heap
Sorting one million objects just to show the top 10 took 328 ms in Node.js 22, while a size-10 min-heap found the same ten in 3.7 ms. That is 88 times faster, and the gap grows with the list. The
Thu Oct 22 2026 · 13 min read · 1 views
Node LRU cache: the Map trick is 25x slower than lru-cache
The popular "Map delete-and-set" LRU cache is about 25x slower than the lru-cache package once the cache holds 10,000 keys. In our Node.js benchmark it managed 0.59 million operations per second,
Wed Oct 21 2026 · 10 min read · 4 views
Consistent hashing: 100 virtual nodes still run 18% hot
A hash ring with 100 virtual nodes per server still leaves the busiest of 10 servers about 18% above the average load. In our lab it took 1,000 virtual nodes to bring that down to 5%. Rendezvous
Wed Oct 21 2026 · 11 min read · 1 views
Postgres OFFSET vs keyset: page 100,000 is 6,000x slower
Keyset pagination is 6,000x faster than OFFSET at page 100,000 of a 5-million-row Postgres table. In our lab, LIMIT 20 OFFSET 1999980 took 182 ms, while the keyset query for the same page took 0.03
Wed Oct 21 2026 · 11 min read · 2 views
Bloom filter for username checks: 2.4 MB, but is it worth it?
A Bloom filter can answer "is this username taken?" for 2 million users in 2.4 MB of memory, but it only pays off when the exact check is expensive. In our lab the same 2 million names took 218 MB in
Wed Oct 21 2026 · 10 min read · 2 views