Is your Node.js project really secure?

JavaScript and Node.js teams do not lack security tools. What they still lack is a dependency security workflow that developers will actually use before release. That is the real gap. A package gets installed, CI (continuous integration) runs, a scanner executes somewhere in the pipeline, and eventually a report appears. From a distance, that can…

Read More

Meta shows structured prompts can make LLMs more reliable for code review

Meta researchers have developed a structured prompting technique that enables LLMs to verify code patches without executing them, achieving up to 93% accuracy in tests. The method, dubbed semi-formal reasoning, could help reduce reliance on the resource-heavy sandbox environments currently required for automated code validation. The development comes as organizations look to deploy agentic AI…

Read More

MongoDB targets AI’s retrieval problem

For all their technical capabilities, large language models (LLMs) still have a memory problem. They can lack the ability to retain context across conversations, and don’t always contain the frameworks to let them access relevant data, ultimately making their results unreliable and untrustworthy. NoSQL database pioneer MongoDB is taking on this problem, releasing new persistent…

Read More

What happens when engineering teams reorganize around AI agents

I counted at least 10 events in San Francisco last night aimed at matching AI startups with VCs. Just another Thursday. But what made Camp AI’s “Agents at Work” event (hosted by Auth0) stand out was its showcase of companies that are in various stages of reorganizing their engineering processes around AI agents. Browserbase, Mastra,…

Read More