Articles on software development, web and technology
Tell us what you need. We reply within one working day.
Learn how large language model assistants can cut repetitive computer work and help ease repetitive strain symptoms for developers.
, 4 min read
OpenAI's Decisions API lets you classify text and images fast, helping you route and prioritize requests in everyday business workflows.
, 4 min read
In July we explained why the CRA's first binding deadline is 11 September 2026, not 2027. Now time is up: from 11 September the 24 and 72-hour clocks for exploited vulnerabilities start. The final checklist, no theory.
, 2 min read
Vercel did something rare and right: it gave advance notice that a patch for a critical Next.js vulnerability lands on 26 August, in versions 16.3.3 and 15.5.24. The details come that day. What to do in the days before so you do not eat the exploitation window.
, 2 min read
In two weeks of August, Anthropic made Sonnet 5's price permanent at 2 and 10 dollars per million tokens, updated Opus 5, OpenAI restructured its lineup into durable tiers and Google shipped Gemini 3.7 Flash. If you run an AI feature in production, your cost tiering is already stale.
, 2 min read
In July we framed Hetzner's rise as one provider's choice. By August it is clearly the symptom: OVHcloud confirms 5-10%, the hyperscalers will follow in the second half, and DRAM costs are up to 500% higher than September 2025. What to do when the problem is silicon, not a price list.
, 2 min read
On 4 August the GitHub account of the keyv maintainer was compromised, 127 million weekly downloads, and within two days a self-propagating worm poisoned over 1,300 package versions. You do not need to use keyv to be hit. What we checked across client pipelines.
, 2 min read
In July it was a deadline to prepare for, now it is applicable law: from 2 August chatbots, generated content and deepfakes must be disclosed, and on 31 July the Commission confirmed enforcement would begin. What we fixed across client projects in half a day.
, 3 min read
The CRA's first binding obligation is not December 2027: it is 11 September 2026, when reporting of actively exploited vulnerabilities begins. What the Commission's new guidance says and what to prepare now.
, 3 min read
On 12 June a US export-control order switched off a frontier model for everyone, everywhere, for eighteen days. What that means for a European SME with a feature in production, and how you actually defend against it.
, 3 min read
The Digital Omnibus took effect on 27 July and pushes the high-risk rules out to December 2027. Article 50 did not move: from 2 August 2026 chatbots, generated content and deepfakes must be disclosed, and in Italy ACN does the enforcing.
, 3 min read
On 17 July WordPress closed WP2Shell, a two-CVE chain giving unauthenticated code execution on a clean install, and the first attempts landed within hours. What we checked across the sites we maintain, and why patched does not mean clean.
, 3 min read
Twelve editors, one storage, more than 80 TB of footage in three days. At Kappa FuturFestival 2026 in Turin SEM Devs ran the media crew's data management on an all-flash NVMe hot storage at 40 Gbit over fiber, mirrored onto dual NAS.
, 5 min read
The Go native compiler landed on 8 July: full builds 8 to 12 times faster and the first error in the editor after 1.3 seconds instead of 17.5. The benchmarks, the breaking changes, and how to schedule the migration.
, 3 min read
The fourth pricing move in a year: Hetzner's CCX and CPX lines rise up to 2.75x, and a single rescale moves your instance onto the new list. What we changed on our own and our clients' infrastructure, and why switching provider does not fix it.
, 3 min read
Logs, metrics and traces aren't a big-company luxury. Here's the cheap, lightweight stack we use to understand what happens in production.
, 3 min read
The EU AI regulation phases in over time. Many SMEs assume it doesn't touch them. Often it does. Here's what matters if you build AI features.
, 3 min read
Synced across devices, pushed by Apple, Google and Microsoft. Are passkeys ready for serious login? What we learned shipping them.
, 2 min read
It's no longer autocomplete. Agents read the repo, open PRs, fix tests. But the bottleneck moved, it didn't vanish.
, 2 min read
The Oxide engine, CSS-first config, faster builds. We migrated three real projects. What we gained and where it hurt.
, 2 min read
Behind the clips you scroll online there's a problem the crowd never sees: the data. At Nameless Music Festival 2026 SEM Devs handled ingest, redundant dual-NAS storage and the network that let the whole crew edit straight off the storage.
, 5 min read
Interaction to Next Paint replaced FID as the responsiveness metric. A year later we know what actually moves the needle and what is theater.
, 3 min read
Hetzner, OVH, Aruba and new EU players grow quietly. Between Cloud Act, GDPR and real pricing, the choice gets pragmatic.
, 2 min read
Since 17 hit LTS we ran it on our largest projects. What the upgrade was worth and what stayed on paper.
, 2 min read
A year after the autonomous-agents season, the operational level has risen. But winning use cases are few and well-defined.
, 2 min read
Server Actions taking center stage, partial prerendering finally stable, and a build pipeline making less noise. Verdict in May 2026.
, 2 min read
The European Accessibility Act has been in force since June 28, 2025. In May 2026 the picture is clearer: few fines, many audits, a few surprises.
, 2 min read
Early 2026 Chrome UX Report data is clear: INP is the metric separating fast sites from slow ones. What it takes to stay under 200ms.
, 3 min read
After five years of hype, Kubernetes in Italian SMEs is rare. Is that failure or a correct choice?
, 2 min read
Lit, Shoelace, micro-frontends. Are Web Components a serious choice in 2026? Our experience on three cases.
, 2 min read
Discover how Claude Code evolved from a command-line tool to a sophisticated product with a tech stack including TypeScript.
, 10 min read
Discover how GSD can help you manage context and streamline complex project workflows in software development
, 45 min read
Discover the fundamental differences between OpenClaw, Nanoclaw, and Picoclaw, and how these technologies can impact your software development
, 30 min read
Discover how OpenAI Codex uses artificial intelligence to generate high-quality code and improve developer productivity
, 30 min read
Postgres 17 shipped in September 2024. Six months after upgrading our projects, three things that really matter.
, 2 min read
Vercel revamped the Marketplace integrating AI assistants for setup, debug, deploy. What really works.
, 2 min read
Microsoft built native AI into VS Code. For Copilot subscribers, is it still worth $19/month? Field test.
, 2 min read
Cloudflare Workers, Vercel Edge, Deno Deploy, Bun. Four philosophies. What we pick in 2026 for edge-native projects.
, 2 min read
Informal EU Parliament discussions on NIS3. Nothing official, many signals. What they reveal.
, 2 min read
Twelve months after Italian Decree 138/2024 came into force, we walked seven companies through the path. Five things that make the difference, and three that can be skipped.
, 3 min read
After a year of agents on tickets, lead routing and qualification, we know where they pay off and where they ruin things. Three patterns that work, three that don't.
, 2 min read
Agentic AI, edge native, prompt cache, real NIS2, SBOM, ARM, ESG. What really entered, what stayed noise.
, 2 min read
Two years after 1.0, Bun reaches 2.0 with Node ≥ 22 parity, native deploy and polished tooling.
, 2 min read
pgAdmin gets the job done. But for those who work with databases daily, much more pleasant alternatives exist.
, 2 min read
Build a custom ERP from scratch or adopt an off-the-shelf one? The answer is not ideological. It is a calculation with three variables too many clients forget.
, 2 min read
Knowing what's inside your software is now mandatory, not optional. Three tools to start seriously.
, 2 min read
Type-safe routing, server functions, full SSR. TanStack Start tries to do to Next.js what Next.js did to Create React App.
, 2 min read
Anthropic shipped Claude 4.5 with more efficient prompt caching. For teams running AI assistants in production, savings are real.
, 2 min read
Zero-trust is the most overused term in cybersecurity. For an SME, what does it actually mean, where do you start, and what does it cost.
, 3 min read
Mature AI video models in 2025. For marketing, training or product: where they pay off and where not yet.
, 2 min read
Serverless job processing or self-hosted Redis: two philosophies. When we pick which, and why.
, 2 min read
Mutated snapshots, deleted online copies, backup heirs. Three lessons that reshaped our standard setup.
, 2 min read
The European Accessibility Act is live. Across six audits, seven recurring issues that block AA.
, 2 min read
Two years ago we were sceptical. Today headless WP is a more mature practice with better tools and a clearer scope. What changed and what did not.
, 3 min read
Auth.js v5 went stable. What changes, how to migrate, and why we waited.
, 2 min read
New ARM instances on Hetzner Cloud. Performance, Node.js compatibility, containers, price: real numbers.
, 2 min read
Three players, three audiences. The matrix we use to recommend the right payment mix for our clients.
, 2 min read
Synology is still the reference, Ugreen is the direct new contender. Which to pick today for a video studio, a photo production or a small office.
, 2 min read
CSRD widens its reach, sustainability demands flow from the supply chain. What we built (and bought) for six clients.
, 2 min read
Two years of AI assistance in our daily work. Which tool we use for what, where each one shines, and why the future is not single-tool.
, 3 min read
WordPress' latest major polishes the Site Editor. What landed well, what breaks, what to test in staging.
, 2 min read
Pinecone, Qdrant, Weaviate. Or just pgvector. The real thresholds where dedicated databases win.
, 2 min read
After a year and a half of Server Components in real projects, we have ten pages of lessons. The four that changed how we think about web apps.
, 3 min read
Three GDPR-friendly alternatives to Google Analytics. Which we pick for clients, and what self-hosting actually costs.
, 2 min read
Built to handle whole tasks, not single lines. After a month on real projects, where it shines and where it doesn't.
, 2 min read
Workers are powerful but strict. 10ms CPU per request — not wall time — disciplines how you write code.
, 2 min read
On January 22 Tailwind v4 went stable. Faster builds, CSS configuration, native container queries. Here is why we are migrating our projects.
, 2 min read
Adding columns, renaming, changing types: all without service interruption. Four techniques we apply.
, 2 min read
Stable in December 2024, in production by January. useActionState, native form actions, useOptimistic: what really changes.
, 2 min read
No top 100 list. The five innovations that entered our real projects this year and stayed.
, 2 min read
In November Anthropic announced the Model Context Protocol. It looks like a technical detail; it is a paradigm shift for anyone coding with AI assistants.
, 2 min read
From February's block to Apple's reversal. State of PWAs on iPhone in Europe, with what works and what does not.
, 2 min read
The first rules on foundation models kick in May 2025. What providers, integrators and end-customers must do.
, 2 min read
Async Request APIs, less aggressive caching, React Compiler in beta. Next.js 15 is the most impactful release since 13. What to adopt and what to delay.
, 2 min read
Prisma stays the default, Drizzle has gained ground. When we pick which in 2024.
, 2 min read
Italian Decree 138/2024 is now in the Official Gazette. What it operationally means for companies in the NIS2 scope, and what to do in the next 90 days.
, 2 min read
Astro 5 unifies content collections, external CMSes and APIs. For content-heavy sites, the missing leap.
, 2 min read
WCAG 2.2 has been official since October 2023. With the European Accessibility Act landing in June 2025, AA is a baseline, not a target. Here is what changes.
, 2 min read
Three different philosophies for decoupling e-commerce frontend and backend. When each one fits, and for whom.
, 2 min read
Reacting to S3 file arrivals without piling up 30 Lambda triggers. EventBridge is the answer — if you can model it.
, 2 min read
No OpenVPN, no manual WireGuard. Tailscale puts you on a private mesh in 90 seconds. What changed after we adopted it.
, 2 min read
Section styles, overrides in synced patterns, view transitions: WordPress 6.6 is the most solid block editor release to date. Here is what is worth adopting.
, 2 min read
Clean cache, parallel jobs, smart matrix. From 14 minutes down to 3 on a real build of ours.
, 2 min read
Dozens of photographers, hours of video to ingest, social teams posting live. How to keep a major festival's media pipeline running without losing a single frame.
, 3 min read
Connect blocks to custom fields without writing PHP. For editorial site builders, a small revolution.
, 2 min read
Catalogue, orders, warehouse, invoicing: the sore spot of every Italian e-commerce. The integration patterns we actually use in production.
, 2 min read
Semantic document search across 8,000 internal documents. Postgres + pgvector + embeddings: lessons learned.
, 2 min read
Three different philosophies, three different price brackets. Which one we pick for our clients, how we move between them and what each really costs.
, 2 min read
Three data-fetching libraries, three philosophies. When we pick what, and why TanStack Query is almost always our default.
, 2 min read
Managed switches, Wi-Fi 6/7 APs, centralised controller. Why we keep picking UniFi for offices, studios and production sites with under 200 devices.
, 2 min read
Customizable Studio, GROQ, real-time collaboration. What sold us and the three places we sweated.
, 2 min read
Prisma 5.10 brings relationLoadStrategy, a preview flag that lets you pick between subquery and join for relations. For anyone fighting hidden N+1, it is fresh air.
, 2 min read
Container Manager replaced Docker. What we learned running 12 stacks on DSM across our clients.
, 2 min read
The NIS2 directive lands in Italy in 2024. The scope is far wider than NIS1: who is affected, what to do, and where to start.
, 2 min read
After 38 hours of trilogue, on December 8 2023 the political deal landed. What changes for AI builders and users in Europe.
, 2 min read
The Italian DPA is again going after non-compliant cookie banners. Between dark patterns, scroll-as-consent and Google Analytics, here are the rules we apply to every client site.
, 2 min read
Test runner, package manager, runtime: Bun 1.0 is already faster than Node at everything. Is that enough to ship it?
, 2 min read
Three copies, two different media, one offsite. A thirty-year-old rule still ignored by too many Italian businesses. Here is how we actually deploy it on site.
, 2 min read
R2 promises zero egress fees. For anyone running S3 + CDN, is the jump worth it? Real numbers from a client.
, 2 min read
Vercel shipped Next.js 14 at Next.js Conf in San Francisco: no new APIs but Server Actions go stable and Partial Prerendering lands in preview.
, 2 min read
Tailwind kills CSS-in-JS and a chunk of JS runtime with it. Let us quantify the saving on three real projects.
, 2 min read
TypeScript 5.2 brings `using` and `await using`, mirroring the ECMAScript Explicit Resource Management proposal. A small revolution for anyone juggling files, connections and locks.
, 2 min read
PWA score gone, INP replacing FID, accessibility tightened. A small revolution in our audit reports.
, 2 min read
Decoupling WordPress from the frontend is trendy, but it is not the universal answer. Here is when it pays off, when it does not, and what we have learned on the job.
, 2 min read
Smooth navigations like a real app, but with a static site. Astro 3.0 makes a big step and rewires how we think content-heavy sites.
, 2 min read
MERGE, faster logical decoding, better sort performance. What we actually used and what stayed on paper.
, 2 min read
Vercel marked the App Router stable in 13.4. Between Server Components, nested layouts and new routing conventions, here is what to adopt now and what to let mature.
, 2 min read
