@HowardYHuang · X

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

@RmndDesign · X

@kngkng182542 · X

If you're paying for Canny, give FeedLog a look. Same workflow for collecting feedback and managing feature requests, but free during launch.

@DolfySocial · X

Vibe coders design for one screen size, then panic when a tablet or a small phone breaks the layout. Dolfy's token spec scales spacing and type proportionally, so screens hold up at every breakpoint without a second design pass. #mobiledev #vibecoding

@MahatiSingh · X