Flux
Toutes les sources

Freek Van der Herten

20 articles Flux RSS
Programmation Web
★ Scotty: a beautiful SSH task runner
Récent

★ Scotty: a beautiful SSH task runner

We just released Scotty, a beautiful SSH task runner. It lets you define deploy scripts and other remote tasks, run them from your terminal, and watch every step as it happens. It supports both Laravel Envoy's Blade format and a new plain bash format. Why we built Scotty Even though services like Laravel Cloud make it possible to never think about servers again, I still prefer deploying to my own servers for some projects. I know my way around them, I can pick whichever server provider I want,…

Freek Van der Herten
★ What's new in laravel-activitylog v5

★ What's new in laravel-activitylog v5

We just released v5 of laravel-activitylog, our package for logging user activity and model events in Laravel. In Flare, Mailcoach, and Oh Dear we use it to build audit logs, so we can track what users are doing: who changed a setting, who deleted a project, who invited a team member. If you need something similar in your app, this package makes it easy. This major release requires PHP 8.4+ and Laravel 12+, and brings a cleaner API, a better database schema, and customizable internals. Let me…

Freek Van der Herten
★ Laravel Query Builder v7: a must-have package for building APIs in Laravel

★ Laravel Query Builder v7: a must-have package for building APIs in Laravel

We just released v7 of spatie/laravel-query-builder, our package that makes it easy to build flexible API endpoints. If you're building an API with Laravel, you'll almost certainly need to let consumers filter results, sort them, include relationships and select specific fields. Writing that logic by hand for every endpoint gets repetitive fast, and it's easy to accidentally expose columns or relationships you didn't intend to. Our query builder takes care of all of that. It reads query…

Freek Van der Herten
A GitHub Issue Title Compromised 4,000 Developer Machines

A GitHub Issue Title Compromised 4,000 Developer Machines

A deep dive into "Clinejection", where an attacker injected a prompt into a GitHub issue title, which an AI triage bot interpreted as an instruction. The resulting chain led to cache poisoning, credential theft, and a compromised npm package that silently installed a second AI agent on 4,000 developer machines. Read more

Freek Van der Herten