Freek.dev

A deep dive into immutability in PHP, from readonly properties and interior mutability to immutable value objects, collections, dates, cloning, boundaries, and testing.

July was LaraPlugins' busiest month yet: 3,734 human visitors, 4.5 million AI agent requests, a Reddit post that blew up, and a sneaky data drift bug I had to hunt down. Here’s a look behind the scenes at what we shipped, what broke, and why building for humans still matters most.

On August 14 auto mode becomes the default in Claude Code. Anthropic's own test found it catches 89% of dangerous commands versus 13.6% for human reviewers, and still calls it not risk-free. This is the practical playbook: the permission rules, the PreToolUse hook that blocks a push on red tests, and the review habits that keep it honest, with the actual config.

Every CMS tribe (WordPress, Drupal, Statamic, Sanity, pick your poison) has quietly cracked problems the others don't even know exist, but none of that wisdom leaks out because everyone's heads-down in their own bubble. AI just torched the cost of switching stacks, so staying fluent in only one CMS dialect isn't cozy anymore; it's a liability.

Laravel Truss 1.6 lets you theme the dashboard to match your app: your own palette under truss.theme, light and dark, with a live theme builder. It also adds truss:export, which writes your database structure to DBML, JSON, CSV, Markdown, or Mermaid, with a --check flag that fails CI when a committed schema file drifts. Structure only, never row data.

An essay on how AI-assisted development turns engineers into full-time reviewers. We spend our days evaluating AI-generated diffs instead of writing code, and that shift carries a new cognitive fatigue and may widen the senior/junior gap.

Truss 1.5 adds truss:doctor, a deterministic, structure-only review of your Laravel database: 13 rules flagging missing primary keys, unindexed foreign keys, type mismatches, money stored as a float, and more, with exit codes so a bad migration fails the build. No AI, no queries, no row data, safe to run in CI against a database you don't fully trust.

Learn about the new "clamp" function in PHP 8.6 and how it can be used with different data types. We also discuss how to use "clamp" in your PHP and Laravel projects before PHP 8.6 is released.

Skills look like the disk tier of the CLAUDE.md memory model. They aren't. The real model has four tiers: RAM, path-scoped rules, skills, and disk.

A live, zoomable ER diagram of your Laravel app's actual database schema, safe to run in production because it only ever reads structure, never rows.

Laravel is becoming the best choice for building full-stack web projects in the AI agentic coding era. But rewriting functionality from scratch each time wastes tokens. That is why Laraplugins.io curated plugins that integrate directly with the Laravel AI SDK, so your agent can hit the ground running on new projects faster

Favicon Fetcher v3.12.0 adds support for Guzzle 8 and includes security improvements for the GitHub Actions workflows.

I found there wasn't any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper: https://www.usenix.org/conference/usenixsecurity24/presentation/wessels https://github.com/securized/laravel-ssrf

A deep dive into PHP attributes, from metadata and Reflection to practical design patterns, Laravel examples, performance, testing, and the cases where explicit code is better.

This article explains how to introduce a ledger that tracks the movements of a column, to ensure that at all points, the final state of the column can be derived from all the movements that has happened over time.

There's a third way to automate Claude Code, and unlike /goal and /loop, it doesn't need your laptop open at all. Anthropic just shipped routines: cloud-hosted automations triggered by a schedule, an API call, or a GitHub event.

A deep dive into the Laravel Scheduler, from event registration and cron evaluation to mutexes, background processes, sub-minute tasks, and production-safe scheduling.

Anthropic found that Claude's internal reasoning uses a small, limited workspace, not the whole conversation. I break down what that means in practice: stage your prompts one decision at a time instead of dumping a whole feature at once.

Every year I dread coming back from vacation not because of the work, but because I have no idea where I left off. A failing test, a well-written TODO, and a slow first day back are all you need to ease back in.