🤖 Bots just became the majority of the internet

Hey there.

Welcome to Full Stack Focus. 👋

Here's everything you need to know this week in the world of full-stack development.

Your support queue gets a head start every morning.

Viktor reads overnight tickets, tags them by product area, summarizes the patterns, and posts a brief in #support. The agent picks up the queue already triaged. The PM sees recurring requests rolled up by Friday.

Get Started for Free

———————————————————————————

🔥 The Big One

🌍 GLM-5.2 Just Went Fully Open — Hours After the US Restricted a Frontier Model Zhipu (Z.ai) dropped GLM-5.2 on June 13: a 744B-parameter MoE with a genuinely usable 1M-token context window, MIT-licensed weights, and it slots into Claude Code with a single config change. Founder Jie Tang announced it with a pointed line about frontier intelligence belonging to everyone — posted the same day the US government ordered Anthropic to cut access to its top-tier models. Whether you're here for the geopolitics or you just want a powerful free model for repo-scale agentic work, this is the open-weights release of the year. The timing was not an accident.

———————————————————————————

Front-End

⚛️ React Finally Has a Foundation — Backed by Meta, Microsoft, Amazon & Vercel The React Foundation has launched under the Linux Foundation to directly fund the maintainers behind 54+ ecosystem libraries — Redux, TanStack Query, React Router, and more. You can sponsor a specific library, become a voting member with a say in funding decisions, or just buy a shirt that quietly pays the people maintaining the tools you ship on every single day.

🧭 A Mental Model for TanStack Start (If Your Brain Is Wired for Next.js) Been Next.js-brained for years and TanStack Start looks tempting but alien? Adarsha Acharya maps one directly onto the other: router-first architecture, explicit server boundaries, typed routing, caching, rendering, and server functions — the exact concepts you already know, relabeled. It's the translation layer that makes switching feel less like starting from zero. Block out the 26-minute read; it'll save you a confused weekend.

📊 visx: Stop Fighting a Charting Library and Build Your Own Airbnb's visx is 30+ low-level visualization primitives that pair D3's math with React's rendering — no more enter()/exit()/update(), no more copy-pasting D3 into a useEffect. It's deliberately not a charting library: you compose exactly the chart you need and bundle only the packages you actually use. If Recharts has ever boxed you in, this is the un-opinionated escape hatch you keep meaning to try.

📟 Someone Reverse-Engineered the Kindle Homepage to Kill Its Ads Turns out the Kindle homepage has quietly run on React Native + Hermes bytecode since 2022 — so one developer learned to patch Hermes bytecode (version 84, naturally) to nuke the "Discover Books" and "Top Reads with Prime" ad shelves. The writeup is a deep, surprisingly fun tour through disassembling an RN app and patching functions to always return false. All this effort to remove ads from a device you already paid for — and honestly, respect.

———————————————————————————

Programming & Craft

🎸 Cleaning Up After AI "Rockstar" Developers We've all inherited a codebase from a rockstar dev — brilliant, clever, completely unmaintainable, and long gone. Jesse Skinner's sharp reframe: every fresh AI chat is a new rockstar — fast, amnesiac, and totally indifferent to whether your system stays understandable. The fix isn't banning the LLM; it's leading the engineering and keeping it generating small pieces you can actually follow. The cleanest take on the vibe-coding hangover you'll read this week.

📧 The Lies We Tell Ourselves About Email Addresses You can receive mail at an address with an 80-character local-part, no dot at all, an IP literal instead of a domain, or non-ASCII characters that quietly merge two different İbrahims into one account when your toUpperCase() uniqueness check runs. Ben Vezzani's tour through email's absurd edge cases lands on one liberating conclusion: stop validating with regex and just send a verification email. Bonus — you probably get to delete code, which is every programmer's actual favorite thing.

📐 7 More Common Mistakes in Architecture Diagrams Labeling resources by type but never by name, "master" diagrams that try to cram an entire system onto one canvas, conveyor-belt flows that hide all the real round-trips, and fan traps that collapse your relationships into a single message broker. Plus mistake #7: assuming AI can generate a quality diagram straight from your source code (it mostly can't — yet). A genuinely practical checklist if your diagrams confuse more than they clarify.

———————————————————————————

AI, Tooling & The Industry

🤖 Bots Now Make Up More Than Half of All Web Traffic Fresh Cloudflare Radar numbers put bots at 57.6% of worldwide HTTP requests vs just 42.4% human — up from roughly 30% only nine months ago. The r/webdev thread's gut-punch question is the part that lingers: if bots are most of the traffic now, who exactly are we building all this for? A short, slightly existential data point worth a slow think between PRs.

☁️ OpenAI Is Buying Ona to Give Codex a Place to Live in the Cloud With 5M+ weekly Codex users (up 400% this year), OpenAI wants agents that keep working after you close your laptop. Ona brings secure, persistent cloud environments that run inside a company's own infrastructure — so long-running agents can grind for hours or days under enterprise security and governance controls. The agent-that-never-sleeps era is being deliberately built on someone else's cloud.

🧪 antirez: A New Era for Software Testing Redis creator Salvatore Sanfilippo on the one place LLMs improve software quality without the usual quality-vs-speed tradeoff: QA. He writes a markdown file telling an agent to act as a QA engineer — diff the new commits, hunt for regressions, spin up a replicated production setup, simulate days of real-world usage — catching exactly the manual testing everyone always skips. His thesis: automatic programming may lower code quality, but automatic QA might quietly raise it back up.

🥩 No, Everyone Is Not Using AI for Everything DuckDuckGo's Gabriel Weinberg lines up Gallup, Microsoft, and Pew data to puncture the narrative: it's roughly one-third using AI actively, one-third occasionally, and one-third not at all. His analogy — people consume AI like they eat meat: some embrace it, many cut back, some abstain entirely, for overlapping reasons of trust, privacy, and perceived value. A useful gut-check if you live inside the early-adopter bubble (and let's be honest, most of us reading this do).

🛡️ VS Code Now Waits 2 Hours Before Auto-Updating Extensions After a brutal run of supply-chain attacks, VS Code 1.123 adds a two-hour delay before extensions auto-update — just enough of a window for a malicious release to get flagged and pulled before it ever lands on your machine. Trusted publishers (Microsoft, GitHub, OpenAI) are exempt, and you can still force an update manually. It joins npm, pnpm, Bun, Yarn, and RubyGems, which all shipped similar "cooldown" gates this year.

🍦 The curl Team Is Taking All of July Off From Security Reports Daniel Stenberg announced curl's "summer of bliss": from July 1 to August 3, the project won't accept or process any vulnerability reports — the HackerOne form is paused and the security inbox is a dead end. After months of relentless (often AI-generated) report pressure, the maintainers are simply going to rest. "The bad guys won't rest," he notes — but curl will.

———————————————————————————

That's a wrap for this week. Reply and let me know which link was your favorite. 👋