Flux
datasette 1.0a35
IA Programmation

datasette 1.0a35

Release: datasette 1.0a35 I'll write more about this one tomorrow, but it's a big release. Three highlights from the release notes: New "Create table" interface in the database actions menu, backed by the /<database>/-/create JSON API. It can define columns, primary keys, custom column types, NOT NULL constraints, literal defaults, expression defaults and single-column foreign keys. (#2787) New "Alter table" table action and /<database>/<table>/-/alter JSON API for changing…

Simon Willison's Weblog
OPFS + Pyodide test harness
IA Programmation

OPFS + Pyodide test harness

Tool: OPFS + Pyodide test harness I've been pondering if Datasette Lite - the Python Datasette application run entirely in the browser using Pyodide and WebAssembly - might be able to edit persistent SQLite files stored on the user's computer. That's what OFPS (Origin Private File System) is for, so I had Claude Code for web build me this playground UI to try it out in different browsers. Tags: browsers, pyodide, datasette-lite

Simon Willison's Weblog
Neovim PHP Development Setup
Programmation Web

Neovim PHP Development Setup

If you’ve ever watched a colleague fly through code in NeoVim and thought “that looks fast but I’d never figure out the config,” the barrier to entry has dropped significantly. LazyVim — a NeoVim distribution that ships with sensible defaults and a plugin manager — gives you a fully functional IDE experience within minutes, with […] The post Neovim PHP Development Setup appeared first on PHP Architect.

PHP Architect
The Code You Didn't Write Is Still Yours to Defend
Cybersécurité Programmation

The Code You Didn't Write Is Still Yours to Defend

Recently I asked an AI assistant to tidy a messy spreadsheet and chart the result. Nothing exotic. To do the work, it spun up a sandbox, pulled a handful of open source packages into that environment, and ran them. I didn't write any code. I didn't ask for any code. Packages I had never seen were fetched and executed on my behalf, and it was over in seconds. That was a software supply chain event. It happened in a workflow that no scanner, no registry proxy, and no review process was watching.…

Socket
Principal Drift
IA

Principal Drift

Over the past year I’ve reviewed enterprise agent architectures at roughly two dozen organizations, including banks, retailers, healthcare systems, and a couple of regulators. The architecture diagrams have been reliably impressive. There are boxes for the MCP gateway, the tool registry, the vector store, the orchestrator, the policy engine, and the observability stack. There are […]

O'Reilly Radar — AI/ML
One Month of Ecosystem Security Engineering
Programmation Web

One Month of Ecosystem Security Engineering

Last month I shared with you that the PHP Foundation secured a grant by Alpha-Omega through the Linux Foundation to help improve the security of the PHP open source ecosystem, and that it is forming a new Ecosystem Security Team. Today I want to update you on the progress so far. After a brief set-up period, I jumped into three main activities: assessing PHP community members' most pressing needs assembling a team of volunteers to help applying the resources granted to scan PHP ecosystem…

The PHP Foundation
Prompt Injection as Role Confusion
IA Programmation

Prompt Injection as Role Confusion

Prompt Injection as Role Confusion First, I absolutely love this: This is a blog-style writeup of the paper. I wish every paper would come with one of these. Academic writing is pretty dry - the impact of a paper can be so much higher if you publish a readable version to accompany the formal one. Charles Ye, Jasmine Cui, and Dylan Hadfield-Menell present some fascinating research into the challenge of having models distinguish their own privileged text (here wrapped in role tags like…

Simon Willison's Weblog
Porting the Moebius 0.2B image inpainting model to run in the browser with Claude Code
IA Programmation

Porting the Moebius 0.2B image inpainting model to run in the browser with Claude Code

This morning on Hacker News I saw Moebius: 0.2B Lightweight Image Inpainting Framework with 10B-Level Performance, describing a small but effective inpainting model - a model where you can mark regions of an image to remove and the model imagines what should fill the space. The released model required PyTorch and NVIDIA CUDA, but since it described itself as 0.2B I decided to try and get it running using WebGPU in a browser. TL;DR: I got it working, and you can try the demo at…

Simon Willison's Weblog
PHP 8.5 Pipe Operator
Programmation Web

PHP 8.5 Pipe Operator

PHP 8.5 shipped with a feature that functional programming enthusiasts have been requesting for years: the pipe operator (|>). If you’ve used pipes in Unix shells, Elixir, F#, or even JavaScript proposals, the concept will feel immediately familiar. If you haven’t, you’re about to discover one of the cleanest ways to express data transformations in […] The post PHP 8.5 Pipe Operator appeared first on PHP Architect.

PHP Architect