@Manixh02 · X

othmanosx · HN

I still don't like the fact that AI is adding more stuff for us to read, it's accelerating the code production but slowing down the code review. I built my own code reviewer as well ( https://pyor.review/ ), surfacing the important stuff first is the right track, but adding more stuff to read is daunting, but asking AI to just point you to what you need to focus on and skim the noise is what I'm leaning more towards.

@Jack_Timonen · X

@yashasvishailly · X

Founders, find the one underlying pattern underlying all that noise

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

jallmann · HN

> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com

@manoj_surya_ · X

I just launched 🚀 A Proof of Ship, every day — straight from your GitHub. You already do the hard part: you commit. git-to-x turns that into a designed card and posts it to X every morning. Your timeline finally looks like what you actually are — someone who ships. → 8 card designs, rotating (terminal, heatmap, flame, ticker…) so it never gets stale → weekly + monthly milestone cards — your streak becomes a story worth following → tweet from your CLI / Cursor / Claude Code without leaving your editor → free for 10 days, full access See who else is shipping daily under #proofofship — and join them. It touches your repo, so safe-to-try came first: → open source (AGPL) — audit it or self-host → read-only — we never touch your code This is my first build-in-public tool. I built it for myself, and for anyone tired of switching between shipping and posting about shipping. First 100 get founding lifetime — a permanent number on every card. Try it, tell me

@crackedceo · X

gojongo · Product Hunt

ReWeaver AI DriftDetector Drift score for any GitHub repo

vpetroff · HN

CobaltCode – Dedicated persistent computer for Codex

u/Delicious-Action-351 · Reddit

I failed 4 times and still made an app to make your code more secure. I made an webapp to make your vibecoded app secure. Today, SaaS entrepreneurs ship fast and don’t check for security, at the end they get hacked and it’ll cost them a lot of money. I decided to solve this issue. Netherite is an AI Security Specialist, you connect Github and choose repo to run security scan. It scans your whole repo in minutes and hands you the professional report and fix prompt for your ai agent. You ca

u/ramu9703 · Reddit

I built a public ledger that tracks a software idea from "shower thought" to shipped code hey everyone, I spent my weekend building a public backlog called vibehub (thanks 5.6 sol :) ) the main problem i wanted to solve is that too many good micro-ideas die in notes apps, and too many open-source projects launch without anyone knowing why they were built, who had the original spark, or how they evolved vibehub tracks the entire lineage of a project: - public feed of software briefs