Programming Tech Brief By HackerNoon

Programming Tech Brief By HackerNoon

By HackerNoonTechnologyEducationLanguage Learning
Download on the App Store

Programming Tech Brief By HackerNoon episodes

  • How to Choose a Dependency: Build vs Buy, Risk Management, and More

    This story was originally published on HackerNoon at: https://hackernoon.com/how-to-choose-a-dependency-build-vs-buy-risk-management-and-more.


    In this post, I'd like to describe my approach when choosing a dependency. I'll first define what I mean by dependency in the context of this post.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #coding, #dependency, #what-is-a-dependency, #build-vs-buy, #risk-management, #dependency-choice-criteria, #dependency-in-coding, #hackernoon-top-story, and more.


    This story was written by: @nfrankel. Learn more about this writer by checking @nfrankel's about page,
    and for more stories, please visit hackernoon.com.


    A dependency is literally something your software depends on: infrastructure such as a filesystem or a database, network, etc. In this post, I'd like to narrow the scope to a software dependency that you need to compile/run, *i.e., a library. I'll first define what I mean by dependency in the context of this post. Then, I'll list a grid of several criteria to analyze possible dependencies.

    12 min
  • The Real Fix for React Native + pnpm: Hoist Everything

    This story was originally published on HackerNoon at: https://hackernoon.com/the-real-fix-for-react-native-pnpm-hoist-everything.


    Learn why React Native projects break under pnpm’s default linking, and why switching to node-linker=hoisted is the simplest, most reliable fix in monorepos.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #react-native, #pnpm, #kotlin, #monorepo, #react-native-pnpm-setup, #pnpm-selective-hoisting-issues, #react-native-codegen-error-fix, #kotlin-errors, and more.


    This story was written by: @heyradcode. Learn more about this writer by checking @heyradcode's about page,
    and for more stories, please visit hackernoon.com.


    Learn why React Native projects break under pnpm’s default linking, and why switching to node-linker=hoisted is the simplest, most reliable fix in monorepos.

    5 min
  • The Painful Joy of Refusing Documentation

    This story was originally published on HackerNoon at: https://hackernoon.com/the-painful-joy-of-refusing-documentation.


    From AI hallucinations to debugging disasters, this essay explores the reasons why developers should stop fumbling around and start reading the docs.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #software-development, #artificial-intelligence, #documentation, #technical-writer, #read-the-damn-manual, #rtfm, #read-the-manual, #read-the-documentation, and more.


    This story was written by: @moerayo. Learn more about this writer by checking @moerayo's about page,
    and for more stories, please visit hackernoon.com.


    From AI hallucinations to debugging disasters, this essay explores the reasons why developers should stop fumbling around and start reading the docs.

    9 min
  • Scaling API Integrations in Symfony: Fire-and-Forget, Factories, Auditing & Streams

    This story was originally published on HackerNoon at: https://hackernoon.com/scaling-api-integrations-in-symfony-fire-and-forget-factories-auditing-and-streams.


    We’re going to architect four production-ready, non-trivial patterns using Symfony 7.x and PHP 8.x.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #symfony, #php, #asynchronous-programming, #asynchronous, #event-driven-architecture, #httpclient-configuration, #http-api, #software-architecture, and more.


    This story was written by: @mattleads. Learn more about this writer by checking @mattleads's about page,
    and for more stories, please visit hackernoon.com.


    We’re going to architect four production-ready, non-trivial patterns using Symfony 7.x and PHP 8.x.

    12 min
  • How to Use Vector Search to Build a Movie Recommendation App

    This story was originally published on HackerNoon at: https://hackernoon.com/how-to-use-vector-search-to-build-a-movie-recommendation-app.


    Learn how to build a semantic movie recommendation app using ScyllaDB’s vector search to find films by meaning, not just keywords.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #scylladb-vector-search, #movie-recommendation-app, #semantic-search-tutorial, #vector-similarity-functions, #python-streamlit-app, #sentence-transformers, #ann-index-scylladb, #good-company, and more.


    This story was written by: @scylladb. Learn more about this writer by checking @scylladb's about page,
    and for more stories, please visit hackernoon.com.


    ScyllaDB’s new Vector Search lets developers build semantic search apps that understand meaning, not just text. This tutorial shows how to create a movie recommendation app using Sentence Transformers, Python, and Streamlit. It covers schema design, vector indexing, and ANN-based querying for fast, intelligent recommendations.

    8 min
  • “It Works on my Machine” Isn’t an Excuse—Test Your README Like a User

    This story was originally published on HackerNoon at: https://hackernoon.com/it-works-on-my-machine-isnt-an-excusetest-your-readme-like-a-user.


    The README says to download from this link. Huh, I'm not sure how to unarchive .tar.xz files - guess I'll search for that.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #programming, #linux-software-installation, #readme-best-practices, #testing-readme-instructions, #virtual-machine-testing, #software-installation-errors, #dependency-management, #open-source-documentation, and more.


    This story was written by: @edent. Learn more about this writer by checking @edent's about page,
    and for more stories, please visit hackernoon.com.


    The README says to download from this link. Huh, I'm not sure how to unarchive .tar.xz files - guess I'll search for that.

    6 min
  • Deploying MobileNetV3 on NXP i.MX8MP: A Complete Edge AI Workflow for Handwritten Digit Recognition

    This story was originally published on HackerNoon at: https://hackernoon.com/deploying-mobilenetv3-on-nxp-imx8mp-a-complete-edge-ai-workflow-for-handwritten-digit-recognition.


    This article details how to port and run the MobileNetV3 model on the NXP i.MX8MP platform to achieve the function of handwritten digit recognition.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #linux, #embedded-systems, #eiq, #mobilenetv3, #eiq-portal, #deep-learning-deployment, #model-training, #industrial-ai, and more.


    This story was written by: @hacker55465321. Learn more about this writer by checking @hacker55465321's about page,
    and for more stories, please visit hackernoon.com.


    This article details how to port and run the MobileNetV3 model on the NXP i.MX8MP platform to achieve the function of handwritten digit recognition. From dataset import, model training and validation to TensorFlow Lite quantization and deployment, it fully demonstrates the usage process of eIQ Portal tool.

    9 min
  • npm's New Token Limits Won't Stop the Attacks That Actually Happen

    This story was originally published on HackerNoon at: https://hackernoon.com/npms-new-token-limits-wont-stop-the-attacks-that-actually-happen.


    npm's October 2025 security overhaul introduces 90-day token limits and kills classic tokens. But the biggest supply chain attacks—from XZ Utils to the...
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #npm, #npm-token-limit, #npm-token-attacks, #cybersecurity, #npm-package-security, #npm-token-security, #npm-security, #software-development, and more.


    This story was written by: @encapsulation. Learn more about this writer by checking @encapsulation's about page,
    and for more stories, please visit hackernoon.com.


    npm's new token lifetime limits (90-day max, 7-day default) and mandatory WebAuthn are good security hygiene, but they don't address how attacks actually happen. The September 2025 breach that compromised 18 packages with 2.6B weekly downloads succeeded via phishing—the attacker had full account access and could generate tokens at will. The XZ Utils backdoor involved three years of social engineering to gain maintainer trust. Token rotation doesn't stop account takeovers, malicious insiders, or the lack of code review. npm is treating the symptom (token exposure) rather than the disease (anyone can publish anything instantly).

    9 min
  • The Automatic Checking of cfgs: How It Works

    This story was originally published on HackerNoon at: https://hackernoon.com/the-automatic-checking-of-cfgs-how-it-works.


    It ensures that the cfg settings are consistent between what is intended and what is used, helping to catch potential bugs or errors early in development
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #rust, #rustlang, #rust-features, #rust-tutorial, #rust-guide, #rust-for-beginners, #rust-cfgs, #rust-automatic-checking, and more.


    This story was written by: @Rust. Learn more about this writer by checking @Rust's about page,
    and for more stories, please visit hackernoon.com.


    This can help with verifying that the crate is correctly handling conditional compilation for different target platforms or features. It ensures that the cfg settings are consistent between what is intended and what is used, helping to catch potential bugs or errors early in the development process.

    5 min
  • Go: Can It Mitigate Supply Chain Attacks?

    This story was originally published on HackerNoon at: https://hackernoon.com/go-can-it-mitigate-supply-chain-attacks.


    It is an explicit security design goal of the Go toolchain that neither fetching nor building code will let that code execute, even if it is untrusted.
    Check more stories related to programming at: https://hackernoon.com/c/programming.
    You can also check exclusive content about #go, #golang, #supply-chain, #supply-chain-attacks, #version-control-system, #go-for-beginners, #go-guide, #golang-safety, and more.


    This story was written by: @Go. Learn more about this writer by checking @Go's about page,
    and for more stories, please visit hackernoon.com.


    All together this means it’s possible to build rich, complex applications with just a handful of dependencies. No matter how good the tooling is, it can’t eliminate the risk involved in reusing code, so the strongest mitigation will always be a small dependency tree.

    9 min

About Programming Tech Brief By HackerNoon

From the publisher's feed

Learn the latest programming updates in the tech world.