Freek.dev

Every CMS tribe (WordPress, Drupal, Statamic, Sanity, pick your poison) has quietly cracked problems the others don't even know exist, but none of that wisdom leaks out because everyone's heads-down in their own bubble. AI just torched the cost of switching stacks, so staying fluent in only one CMS dialect isn't cozy anymore; it's a liability.

Laravel Truss 1.6 lets you theme the dashboard to match your app: your own palette under truss.theme, light and dark, with a live theme builder. It also adds truss:export, which writes your database structure to DBML, JSON, CSV, Markdown, or Mermaid, with a --check flag that fails CI when a committed schema file drifts. Structure only, never row data.

An essay on how AI-assisted development turns engineers into full-time reviewers. We spend our days evaluating AI-generated diffs instead of writing code, and that shift carries a new cognitive fatigue and may widen the senior/junior gap.

Truss 1.5 adds truss:doctor, a deterministic, structure-only review of your Laravel database: 13 rules flagging missing primary keys, unindexed foreign keys, type mismatches, money stored as a float, and more, with exit codes so a bad migration fails the build. No AI, no queries, no row data, safe to run in CI against a database you don't fully trust.

Learn about the new "clamp" function in PHP 8.6 and how it can be used with different data types. We also discuss how to use "clamp" in your PHP and Laravel projects before PHP 8.6 is released.

Skills look like the disk tier of the CLAUDE.md memory model. They aren't. The real model has four tiers: RAM, path-scoped rules, skills, and disk.

A live, zoomable ER diagram of your Laravel app's actual database schema, safe to run in production because it only ever reads structure, never rows.

Laravel is becoming the best choice for building full-stack web projects in the AI agentic coding era. But rewriting functionality from scratch each time wastes tokens. That is why Laraplugins.io curated plugins that integrate directly with the Laravel AI SDK, so your agent can hit the ground running on new projects faster

Favicon Fetcher v3.12.0 adds support for Guzzle 8 and includes security improvements for the GitHub Actions workflows.

I found there wasn't any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper: https://www.usenix.org/conference/usenixsecurity24/presentation/wessels https://github.com/securized/laravel-ssrf

A deep dive into PHP attributes, from metadata and Reflection to practical design patterns, Laravel examples, performance, testing, and the cases where explicit code is better.

This article explains how to introduce a ledger that tracks the movements of a column, to ensure that at all points, the final state of the column can be derived from all the movements that has happened over time.

There's a third way to automate Claude Code, and unlike /goal and /loop, it doesn't need your laptop open at all. Anthropic just shipped routines: cloud-hosted automations triggered by a schedule, an API call, or a GitHub event.

A deep dive into the Laravel Scheduler, from event registration and cron evaluation to mutexes, background processes, sub-minute tasks, and production-safe scheduling.

Anthropic found that Claude's internal reasoning uses a small, limited workspace, not the whole conversation. I break down what that means in practice: stage your prompts one decision at a time instead of dumping a whole feature at once.

Every year I dread coming back from vacation not because of the work, but because I have no idea where I left off. A failing test, a well-written TODO, and a slow first day back are all you need to ease back in.

Agentic commerce is a buzzy term, but is still pretty abstract for developers asking what they can actually build today. This post explains MPP through a working Laravel example, and introduces the new square1/laravel-mpp package.

A practical deep dive into UUIDs, ULIDs, and Sqids, from generation models and sorting behavior to database storage, public IDs, and security trade-offs.

A simple, secure, and fluent PHP API for running untrusted code in isolated Docker containers, talking to the Docker Engine API directly over Guzzle. Sandboxes are locked down by default (no network, non-root, read-only rootfs, resource limits), with fluent managers for containers, images, networks, and volumes.