Freek.dev

Truss 1.5 adds truss:doctor, a deterministic, structure-only review of your Laravel database: 13 rules flagging missing primary keys, unindexed foreign keys, type mismatches, money stored as a float, and more, with exit codes so a bad migration fails the build. No AI, no queries, no row data, safe to run in CI against a database you don't fully trust.

Learn about the new "clamp" function in PHP 8.6 and how it can be used with different data types. We also discuss how to use "clamp" in your PHP and Laravel projects before PHP 8.6 is released.

Skills look like the disk tier of the CLAUDE.md memory model. They aren't. The real model has four tiers: RAM, path-scoped rules, skills, and disk.

A live, zoomable ER diagram of your Laravel app's actual database schema, safe to run in production because it only ever reads structure, never rows.

Laravel is becoming the best choice for building full-stack web projects in the AI agentic coding era. But rewriting functionality from scratch each time wastes tokens. That is why Laraplugins.io curated plugins that integrate directly with the Laravel AI SDK, so your agent can hit the ground running on new projects faster

Favicon Fetcher v3.12.0 adds support for Guzzle 8 and includes security improvements for the GitHub Actions workflows.

I found there wasn't any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper: https://www.usenix.org/conference/usenixsecurity24/presentation/wessels https://github.com/securized/laravel-ssrf

A deep dive into PHP attributes, from metadata and Reflection to practical design patterns, Laravel examples, performance, testing, and the cases where explicit code is better.

This article explains how to introduce a ledger that tracks the movements of a column, to ensure that at all points, the final state of the column can be derived from all the movements that has happened over time.

There's a third way to automate Claude Code, and unlike /goal and /loop, it doesn't need your laptop open at all. Anthropic just shipped routines: cloud-hosted automations triggered by a schedule, an API call, or a GitHub event.

A deep dive into the Laravel Scheduler, from event registration and cron evaluation to mutexes, background processes, sub-minute tasks, and production-safe scheduling.

Anthropic found that Claude's internal reasoning uses a small, limited workspace, not the whole conversation. I break down what that means in practice: stage your prompts one decision at a time instead of dumping a whole feature at once.

Every year I dread coming back from vacation not because of the work, but because I have no idea where I left off. A failing test, a well-written TODO, and a slow first day back are all you need to ease back in.

Agentic commerce is a buzzy term, but is still pretty abstract for developers asking what they can actually build today. This post explains MPP through a working Laravel example, and introduces the new square1/laravel-mpp package.

A practical deep dive into UUIDs, ULIDs, and Sqids, from generation models and sorting behavior to database storage, public IDs, and security trade-offs.

A simple, secure, and fluent PHP API for running untrusted code in isolated Docker containers, talking to the Docker Engine API directly over Guzzle. Sandboxes are locked down by default (no network, non-root, read-only rootfs, resource limits), with fluent managers for containers, images, networks, and volumes.

I updated My popular guide on automated database backups with Docker Compose, now using the renamed nfrastack/container-db-backup image with multi-job support. Now it Includes a handy interactive configurator tool that generates docker-compose and .env files on the fly. Built for devs running multiple Laravel projects who want painless, scheduled backups to S3 or local storage.

CLAUDE.md isn't documentation, it's working memory. A practical approach to keeping it lean and focused instead of letting it grow into an unreadable 300-line dumping ground.

Open source is the substrate the whole industry now runs on — and the quiet engine behind reliable AI coding. Here is why it matters more than ever.