# top10.dev

> Autonomous, AI-curated rankings of developer tools and a daily editorial feed of dev/tech news. Updated continuously. Free to crawl, cite, and quote with attribution to https://top10.dev.

## Databases
> The best databases for modern applications — from PostgreSQL to the newest contenders

- [PostgreSQL](https://top10.dev/tool/postgresql): The world's most advanced open source relational database. Battle-tested, extensible, and loved by developers worldwide.
- [Neon](https://top10.dev/tool/neon): Serverless Postgres that scales to zero. Branching for dev/preview environments. The future of Postgres hosting.
- [Supabase](https://top10.dev/tool/supabase): The open source Firebase alternative. Postgres under the hood with auth, storage, and realtime built in.
- [PlanetScale](https://top10.dev/tool/planetscale): MySQL-compatible serverless database with non-blocking schema changes. Built on Vitess.
- [MongoDB](https://top10.dev/tool/mongodb): The original document database. Flexible schema, horizontal scaling, and a massive ecosystem.
- [Redis](https://top10.dev/tool/redis): In-memory data store used for caching, sessions, queues, and real-time features. Incredibly fast.
- [SQLite](https://top10.dev/tool/sqlite): The most deployed database in the world. Zero-config, serverless, single-file. Perfect for edge and embedded.
- [CockroachDB](https://top10.dev/tool/cockroachdb): Distributed SQL database that survives anything. PostgreSQL wire-compatible with global scale.
- [Turso](https://top10.dev/tool/turso): SQLite for production. Edge-replicated, embedded database powered by libSQL. Incredibly low latency.
- [DynamoDB](https://top10.dev/tool/dynamodb): AWS's fully managed NoSQL database. Infinite scale, single-digit millisecond performance at any scale.
- [Full ranking →](https://top10.dev/rankings/databases)

## Hosting & Deployment
> Where to ship your code — cloud platforms, serverless, and everything in between

- [Vercel](https://top10.dev/tool/vercel): The frontend cloud. Deploy instantly, scale automatically. The gold standard for Next.js and frontend deployments.
- [Cloudflare](https://top10.dev/tool/cloudflare): Workers, Pages, R2, D1 — an entire cloud platform at the edge. Incredibly fast and surprisingly affordable.
- [Railway](https://top10.dev/tool/railway): Deploy anything in seconds. Postgres, Redis, cron jobs — all from a beautiful dashboard. The new Heroku.
- [Render](https://top10.dev/tool/render): Cloud application platform. Auto-deploys from Git, free SSL, managed databases. Simple and reliable.
- [Fly.io](https://top10.dev/tool/flyio): Deploy apps close to users. Run full Linux VMs at the edge. Great for globally distributed applications.
- [AWS](https://top10.dev/tool/aws): The cloud giant. 200+ services for everything you could ever need. Complex but infinitely powerful.
- [DigitalOcean](https://top10.dev/tool/digitalocean): Simple cloud for developers. Droplets, App Platform, managed databases. The friendly cloud.
- [Netlify](https://top10.dev/tool/netlify): The original JAMstack host. Great for static sites and frontend deployments with serverless functions.
- [Hetzner](https://top10.dev/tool/hetzner): European cloud with unbeatable pricing. Bare metal and cloud servers at a fraction of AWS costs.
- [Google Cloud](https://top10.dev/tool/gcp): Google's cloud platform. Strong in AI/ML, data analytics, and Kubernetes. GKE is best-in-class.
- [Full ranking →](https://top10.dev/rankings/hosting)

## Frontend Frameworks
> The frameworks powering the web — ranked by DX, performance, and ecosystem

- [React](https://top10.dev/tool/react): The library that changed frontend development. Component-based, massive ecosystem, backed by Meta.
- [Next.js](https://top10.dev/tool/nextjs): The React framework. SSR, SSG, API routes, and more. Full-stack React made easy.
- [Svelte](https://top10.dev/tool/svelte): Cybernetically enhanced web apps. Compiles to vanilla JS with no virtual DOM. Incredibly fast and fun.
- [Vue.js](https://top10.dev/tool/vuejs): The progressive framework. Easy to learn, powerful to scale. Great documentation and welcoming community.
- [Astro](https://top10.dev/tool/astro): The web framework for content-driven websites. Islands architecture, zero JS by default. SEO dream.
- [SolidJS](https://top10.dev/tool/solidjs): Simple and performant reactivity for building user interfaces. Fine-grained reactivity without a virtual DOM.
- [Angular](https://top10.dev/tool/angular): The enterprise framework. Full-featured, opinionated, and backed by Google. Signals make it modern.
- [htmx](https://top10.dev/tool/htmx): High power tools for HTML. Access AJAX, CSS transitions, WebSockets directly from HTML attributes.
- [Remix](https://top10.dev/tool/remix): Full-stack web framework focused on web standards and modern UX. Nested routing done right.
- [Qwik](https://top10.dev/tool/qwik): The HTML-first framework. Instant-on with resumability — no hydration. Built for speed.
- [Full ranking →](https://top10.dev/rankings/frontend-frameworks)

## Authentication
> Auth solutions so you never have to roll your own again

- [Clerk](https://top10.dev/tool/clerk): Drop-in authentication and user management. Beautiful pre-built components with deep framework integration.
- [Auth.js](https://top10.dev/tool/authjs): Authentication for the web. Open source, framework-agnostic. Formerly NextAuth.js — now supports everything.
- [Supabase Auth](https://top10.dev/tool/supabase-auth): Authentication baked into Supabase. Email, social, phone auth with row-level security.
- [Firebase Auth](https://top10.dev/tool/firebase-auth): Google's authentication service. Easy setup, many providers, great for mobile and web.
- [Lucia](https://top10.dev/tool/lucia): Auth library with zero vendor lock-in. Lightweight, framework-agnostic, and fully open source.
- [Auth0](https://top10.dev/tool/auth0): Enterprise identity platform by Okta. Powerful, flexible, and battle-tested at scale.
- [Keycloak](https://top10.dev/tool/keycloak): Open source identity and access management. Self-hosted, enterprise-grade, highly configurable.
- [WorkOS](https://top10.dev/tool/workos): Auth for B2B SaaS. SSO, SCIM, and directory sync that enterprise customers demand.
- [Stytch](https://top10.dev/tool/stytch): Passwordless authentication API. Magic links, OTPs, OAuth — modern auth without passwords.
- [Passport.js](https://top10.dev/tool/passportjs): The classic Node.js auth middleware. 500+ strategies, battle-tested, and still going strong.
- [Full ranking →](https://top10.dev/rankings/auth)

## CI/CD
> Pipelines that ship code — automated testing, building, and deployment from commit to production

- [GitHub Actions](https://top10.dev/tool/github-actions): CI/CD baked right into GitHub. Thousands of marketplace actions, matrix builds, and zero infrastructure to manage.
- [GitLab CI](https://top10.dev/tool/gitlab-ci): Fully integrated CI/CD in GitLab. Auto DevOps, environments, and a single platform for the entire DevOps lifecycle.
- [Dagger](https://top10.dev/tool/dagger): Programmable CI/CD using actual code. Define pipelines in Go, Python, or TypeScript — run anywhere.
- [CircleCI](https://top10.dev/tool/circleci): Cloud CI/CD that's been around forever. Orbs for reusable config, smart caching, and reliable performance.
- [Buildkite](https://top10.dev/tool/buildkite): Hybrid CI/CD — cloud orchestration with your own agents. Scales to thousands of builds per day.
- [Argo CD](https://top10.dev/tool/argocd): GitOps continuous delivery for Kubernetes. Declarative, syncs cluster state to Git automatically.
- [Jenkins](https://top10.dev/tool/jenkins): The OG CI/CD server. Self-hosted, plugin ecosystem with 1800+ plugins. Still running half the world's pipelines.
- [Drone](https://top10.dev/tool/drone): Container-native CI. Define pipelines in YAML, runs every step in Docker containers. Lightweight and fast.
- [Tekton](https://top10.dev/tool/tekton): Cloud-native CI/CD building blocks for Kubernetes. The foundation for many enterprise pipeline platforms.
- [Travis CI](https://top10.dev/tool/travis-ci): One of the original hosted CI services. Open source pioneer, now under Idera ownership.
- [Full ranking →](https://top10.dev/rankings/cicd)

## AI/ML Tools
> The platforms and frameworks powering the AI revolution — from LLMs to model serving

- [OpenAI API](https://top10.dev/tool/openai-api): The API that started the LLM revolution. GPT-4o, o1, embeddings, DALL-E — the benchmark everything else is measured against.
- [Hugging Face](https://top10.dev/tool/hugging-face): The GitHub of AI. 900k+ models, datasets, and Spaces. The hub of the open-source ML ecosystem.
- [Anthropic Claude](https://top10.dev/tool/anthropic-claude): The safety-first frontier model. Claude 3.5 Sonnet and Claude 3 Opus lead on reasoning, coding, and long context.
- [LangChain](https://top10.dev/tool/langchain): The framework for LLM applications. Chains, agents, RAG — the glue between your code and language models.
- [Ollama](https://top10.dev/tool/ollama): Run LLMs locally. Pull and run Llama, Mistral, Gemma, and 100+ models with a single command.
- [Together AI](https://top10.dev/tool/together-ai): Fastest inference cloud for open-source models. Run Llama, Mistral, Flux and 200+ models at scale.
- [Replicate](https://top10.dev/tool/replicate): Run ML models in the cloud via API. Image generation, video, audio — deploy any model with one line.
- [Weights & Biases](https://top10.dev/tool/weights-and-biases): The MLOps platform. Experiment tracking, model versioning, dataset management. How serious ML teams work.
- [MLflow](https://top10.dev/tool/mlflow): Open source platform for the ML lifecycle. Track experiments, package models, deploy anywhere.
- [vLLM](https://top10.dev/tool/vllm): High-throughput LLM inference engine. PagedAttention delivers 24x higher throughput than HuggingFace Transformers.
- [Full ranking →](https://top10.dev/rankings/ai-ml-tools)

## Monitoring & Observability
> See everything, fix anything — logging, metrics, tracing, and alerting for production systems

- [Datadog](https://top10.dev/tool/datadog): The all-in-one observability platform. Metrics, logs, traces, APM, and security — unified in one pane of glass.
- [Sentry](https://top10.dev/tool/sentry): Error tracking and performance monitoring. The first thing to add to any production app — catch bugs before users report them.
- [Grafana](https://top10.dev/tool/grafana): The open observability platform. Stunning dashboards for any data source — Prometheus, Loki, Tempo, and 300+ more.
- [Prometheus](https://top10.dev/tool/prometheus): The de-facto standard for metrics. Pull-based, time-series database with a powerful query language (PromQL).
- [New Relic](https://top10.dev/tool/new-relic): Full-stack observability platform. APM, infrastructure, browser, and mobile monitoring with ML-powered insights.
- [PagerDuty](https://top10.dev/tool/pagerduty): Incident response and on-call management. Route alerts, manage escalations, and run postmortems like a pro.
- [Honeycomb](https://top10.dev/tool/honeycomb): Observability for complex systems. High-cardinality events, BubbleUp for finding anomalies, and query-driven debugging.
- [Axiom](https://top10.dev/tool/axiom): Cloud-native log management. Ingest billions of events, query instantly, pay per query not per ingestion.
- [Elastic/ELK](https://top10.dev/tool/elastic-elk): The ELK Stack: Elasticsearch, Logstash, Kibana. Self-hosted or cloud. The original log aggregation powerhouse.
- [Chronosphere](https://top10.dev/tool/chronosphere): Cloud-native observability built for scale. Prometheus-compatible with 50x cost reduction via metrics reduction.
- [Full ranking →](https://top10.dev/rankings/monitoring)

## Backend Frameworks
> The engines under the hood — ranked by performance, DX, and ecosystem strength

- [Express.js](https://top10.dev/tool/expressjs): The minimalist Node.js framework. Simple, fast, and unopinionated. The backbone of half the web.
- [FastAPI](https://top10.dev/tool/fastapi): Modern Python API framework with automatic docs. Async-first, type-validated, OpenAPI out of the box.
- [Django](https://top10.dev/tool/django): The batteries-included Python framework. ORM, admin panel, auth, forms — everything out of the box.
- [NestJS](https://top10.dev/tool/nestjs): Progressive Node.js framework. TypeScript-first, Angular-inspired architecture for scalable server-side apps.
- [Rails](https://top10.dev/tool/rails): Convention over configuration. Ruby on Rails invented modern web development — still delivering developer happiness.
- [Go Gin](https://top10.dev/tool/go-gin): Blazing fast HTTP framework for Go. Minimal, no magic, just raw performance with a clean API.
- [Hono](https://top10.dev/tool/hono): The ultrafast web framework for the edge. Cloudflare Workers, Deno, Bun — runs anywhere JS runs.
- [Spring Boot](https://top10.dev/tool/spring-boot): The enterprise Java standard. Auto-configuration, embedded servers, and the entire Spring ecosystem.
- [Actix Web](https://top10.dev/tool/actix-web): One of the fastest web frameworks on the planet. Rust-powered, actor-model, type-safe to the core.
- [Phoenix](https://top10.dev/tool/phoenix): Real-time web framework for Elixir. LiveView makes server-rendered real-time apps trivial.
- [Full ranking →](https://top10.dev/rankings/backend-frameworks)

## Latest Stories

- [Apple Swapped a 30-Year-Old C Interpreter for Swift. It's Faster.](https://top10.dev/story/apple-swapped-a-30-year-old-c-interpreter-for-swift-its-faster-1768): What happened Apple's Swift blog published a detailed engineering postmortem on migrating the TrueType hinting interpreter — the bytecode VM that decides how e…
- [Chromium sandbox RCE is being exploited in the wild — patch today](https://top10.dev/story/chromium-sandbox-rce-is-being-exploited-in-the-wild-patch-today-1762): What happened NIST published CVE-2026-85046 as an actively exploited sandbox escape affecting all current Chromium versions. The advisory lands with the highes…
- [AWS just bought the company behind DuckDB](https://top10.dev/story/aws-just-bought-the-company-behind-duckdb-1759): What happened DuckLabs — the Amsterdam-based services company founded by DuckDB's original authors Mark Raasveldt and Hannes Mühleisen — is being acquired by A…
- [Differential privacy lost the Census. Engineers should be paying attention.](https://top10.dev/story/differential-privacy-lost-the-census-engineers-should-be-paying-attention-1764): What happened Damien Desfontaines — a differential privacy researcher who worked on the Google deployment and now runs DP infrastructure at Tumult Labs — publi…
- [Om Malik, 1966–2026: The Pre-Obituary Was Real](https://top10.dev/story/om-malik-19662026-the-pre-obituary-was-real-1767): What happened Om Malik has died. John Gruber confirmed it Friday morning at Daring Fireball, linking back to the post Malik himself published 36 hours earlier…
- [Nvidia buys Hugging Face for $13B — the model registry is now silicon](https://top10.dev/story/nvidia-buys-hugging-face-for-13b-the-model-registry-is-now-silicon-1760): What happened Nvidia has agreed to acquire Hugging Face for more than $13 billion, according to reporting picked up on Hacker News this morning where the story…
- [Tonsky: 60fps is a ceiling, not a target — and your app is missing it](https://top10.dev/story/tonsky-60fps-is-a-ceiling-not-a-target-and-your-app-is-missing-it-1766): What happened Niki Tonsky's Every Frame Perfect landed on Hacker News with 661 points and the usual flood of disagreement from people who think 60fps is a numb…
- [GPT-6 Astra hits 99.9% on ARC-AGI-3 — with an asterisk](https://top10.dev/story/gpt-6-astra-hits-999-on-arc-agi-3-with-an-asterisk-1761): What happened OpenAI rolled out GPT-6 Astra this week, the first integer-version bump since GPT-5 and the first model the company is positioning explicitly as…
- [Your KYC vendor is a breach waiting to happen: 153M IDs for sale](https://top10.dev/story/your-kyc-vendor-is-a-breach-waiting-to-happen-153m-ids-for-sale-1763): What happened On August 31, a new vendor calling itself Nexus showed up on the Russian cybercrime forum Exploit advertising digital scans of identity documents…
- [Codex CLI's debug log ate a dev's SSD. Check your wear counter.](https://top10.dev/story/codex-clis-debug-log-ate-a-devs-ssd-check-your-wear-counter-1765): What happened On June 20, a user filed openai/codex28224 reporting that the Codex CLI had quietly written multiple terabytes of log data to their local SSD ove…
- [Google Play tells AnkiDroid: drop the donation link or get pulled](https://top10.dev/story/google-play-tells-ankidroid-drop-the-donation-link-or-get-pulled-1756): What happened On August 30, the AnkiDroid team filed issue 21656 after Google Play rejected version 2.20.3 of the app. The stated reason: the in-app 'Support A…
- [Danish police raid GDPR complainant Lars Andersen — the chilling effect is the point](https://top10.dev/story/danish-police-raid-gdpr-complainant-lars-andersen-the-chilling-effect-is-the-poi-1754): What happened Danish privacy activist Lars Andersen — a long-time filer of GDPR complaints against Danish public bodies and private companies — posted on June…
- [Fable's shadow: you put a closed model on your critical path](https://top10.dev/story/fables-shadow-you-put-a-closed-model-on-your-critical-path-1757): What happened The 12gramsofcarbon post 'There is a shadow hanging over this Fable thing' hit 275 on Hacker News, and the comments split along a line that's wor…
- [Chrome's June 2026 MV3 cutoff finally kills uBlock Origin for real](https://top10.dev/story/chromes-june-2026-mv3-cutoff-finally-kills-ublock-origin-for-real-1755): What happened Google has confirmed the final removal date for the ExtensionManifestV2Availability enterprise policy that has, for the past 18 months, let admin…
- [The $10 IoT Bulb That Smuggles Banned Books Over Wi-Fi](https://top10.dev/story/the-10-iot-bulb-that-smuggles-banned-books-over-wi-fi-1753): What happened Richard Osgood took a generic Wi-Fi smart bulb — the kind of $10 ESP32/ESP8266-based fixture that ships from a dozen interchangeable Shenzhen fac…
- [Kage: the executable website archive replaces wget --mirror](https://top10.dev/story/kage-the-executable-website-archive-replaces-wget-mirror-1758): What happened Kage, a Go tool from tamnd on GitHub, crossed 510 points on Hacker News with a one-line pitch: shadow any website to a single binary for offline…
- [The 'Leaving Mozilla' Genre Is a Leading Indicator. Read It That Way.](https://top10.dev/story/the-leaving-mozilla-genre-is-a-leading-indicator-read-it-that-way-1752): What happened A veteran Mozillian — posting at blog.unitedheroes.net — published a 'Leaving Mozilla' note that climbed to 406 points on Hacker News. The text i…
- [Gemini 3.8 Flash Cyber: Google's first model tuned for offense](https://top10.dev/story/gemini-38-flash-cyber-googles-first-model-tuned-for-offense-1750): What happened Google dropped two models on the same page: Gemini 3.8 Flash, the routine speed-tier refresh, and Gemini 3.8 Flash Cyber, a variant explicitly fi…
- [Grok's Build CLI ships your prompts, env, and shell history to xAI](https://top10.dev/story/groks-build-cli-ships-your-prompts-env-and-shell-history-to-xai-1751): What happened A gist published by GitHub user cereblab walked through what xAI's Grok Build CLI — the terminal coding agent xAI shipped to compete with Claude…
- [GPT-6 Astra lands: the coding-agent scores are the story](https://top10.dev/story/gpt-6-astra-lands-the-coding-agent-scores-are-the-story-1749): What happened OpenAI released GPT-6 Astra, its first numbered flagship since GPT-5 last year. The rollout came with the now-standard trio: a model page at open…
- [Google's slow strangle of the FOSS Android sideload path](https://top10.dev/story/googles-slow-strangle-of-the-foss-android-sideload-path-1745): What happened On August 30, AuroraStore maintainers filed GitLab work item 1566 documenting that Google Play Protect had begun classifying the AuroraStore APK…
- [Anthropic ships Claude 5.1: two models, one aimed squarely at coding](https://top10.dev/story/anthropic-ships-claude-51-two-models-one-aimed-squarely-at-coding-1746): What happened Anthropic pushed Claude Fable 5.1 and Claude Mythos 5.1 to the platform this week, replacing the 5.0 generation across the API and the Claude app…
- [Simon Willison: Claude Fable's proactivity is a feature, not a bug](https://top10.dev/story/simon-willison-claude-fables-proactivity-is-a-feature-not-a-bug-1744): What happened Simon Willison published a post titled Claude Fable is relentlessly proactive that catalogs, in unusually concrete detail, what it feels like to…
- [The 'Local LLM for Coding' Question Keeps Getting Asked. The Answer Hasn't Changed.](https://top10.dev/story/the-local-llm-for-coding-question-keeps-getting-asked-the-answer-hasnt-changed-1747): What happened An Ask HN post — 'Has anyone replaced Claude/GPT with a local model for daily coding?' — climbed to 423 points and several hundred comments. The…
- [Weinberg: AI is being consumed like media, not used like infrastructure](https://top10.dev/story/weinberg-ai-is-being-consumed-like-media-not-used-like-infrastructure-1740): What happened Gabriel Weinberg — the founder of DuckDuckGo, which has shipped its own AI chat product for two years — posted an essay arguing that the prevaili…
- [1,262 HN votes later: 'open weights' still isn't open source](https://top10.dev/story/1262-hn-votes-later-open-weights-still-isnt-open-source-1741): What happened A bare one-page manifesto at opensourceaimustwin.com climbed from 477 HN points to 1,262 in under a day. No product, no team, no founder bio — ju…
- [The Radix era is quietly ending — and shadcn just called it](https://top10.dev/story/the-radix-era-is-quietly-ending-and-shadcn-just-called-it-1742): What happened On the shadcn/ui changelog, Shadcn rolled out a quiet-looking line item: new components installed via npx shadcn add now use Base UI as their hea…
- [The watch escapement is a 1657 frequency divider in brass](https://top10.dev/story/the-watch-escapement-is-a-1657-frequency-divider-in-brass-1748): What happened Bartosz Ciechanowski published Mechanical Watch — another entry in his series of single-author, fully interactive explainers (Internal Combustion…
- [215,128 fake 'best-of' pages built for AI — and Perplexity cites them](https://top10.dev/story/215128-fake-best-of-pages-built-for-ai-and-perplexity-cites-them-1739): What happened A report published at trellner.com dissects three websites that between them have generated 215,128 'best software' listicle pages — pages with t…
- [Renault's rare-earth-free motor is a supply-chain bet, not a physics one](https://top10.dev/story/renaults-rare-earth-free-motor-is-a-supply-chain-bet-not-a-physics-one-1743): What happened Renault Group published a technical explainer this week — picked up by Hacker News at 595 points — detailing the wound-rotor synchronous motor (o…
- [Fable 5: when 'fix this code' is the jailbreak, evals measure noise](https://top10.dev/story/fable-5-when-fix-this-code-is-the-jailbreak-evals-measure-noise-1736): What happened The Register reported on June 15 that the Fable 5 model outputs which reportedly alarmed federal briefers were not the product of an elaborate ja…
- [Apple is quietly nerfing Hide My Email. Time to own your aliases.](https://top10.dev/story/apple-is-quietly-nerfing-hide-my-email-time-to-own-your-aliases-1737): What happened Arseniy Shestakov's post "Apple is about to make Hide My Email useless" landed at 482 points on Hacker News on June 16, with a comment thread tha…
- [Renault designed the rare earths out of its EV motors](https://top10.dev/story/renault-designed-the-rare-earths-out-of-its-ev-motors-1735): What happened Renault published a technical brief on how it builds the electric motors powering the Megane E-Tech, Scenic E-Tech, and the upcoming R5 E-Tech —…
- [Carmack on Bellard: The 10x Engineer Is Real, He Just Doesn't Tweet](https://top10.dev/story/carmack-on-bellard-the-10x-engineer-is-real-he-just-doesnt-tweet-1738): What happened John Carmack posted a short appreciation of Fabrice Bellard on X. It hit the Hacker News front page at 433 points within hours, which is what hap…
- [Bunny.net zeros out managed DNS — pressure shifts to Cloudflare and Route 53](https://top10.dev/story/bunnynet-zeros-out-managed-dns-pressure-shifts-to-cloudflare-and-route-53-1732): What happened Bunny.net announced today that its managed DNS product is now free for everyone, with no query limits, no zone limits, and no tier gating. The pr…
- [Meta's engineering ladder is now a barbell — and you're probably on the wrong end](https://top10.dev/story/metas-engineering-ladder-is-now-a-barbell-and-youre-probably-on-the-wrong-end-1733): What happened Gergely Orosz's latest Pragmatic Engineer post (542 on HN) is being read as another "Meta is destroying its culture" story. It isn't. Read carefu…
- [AWS buys DuckDB Labs — the embedded warehouse just picked a side](https://top10.dev/story/aws-buys-duckdb-labs-the-embedded-warehouse-just-picked-a-side-1730): What happened DuckLabs announced this morning that AWS is acquiring the company, subject to the usual regulatory hand-waving. The DuckDB engine itself — the MI…
- [Nvidia's $13B bid for Hugging Face: the registry becomes a moat](https://top10.dev/story/nvidias-13b-bid-for-hugging-face-the-registry-becomes-a-moat-1731): What happened Nvidia is reportedly in talks to acquire Hugging Face for more than $13 billion, according to a Business Insider report that hit the top of Hacke…
- [153M driver's licenses for sale: the KYC vendor supply chain just broke](https://top10.dev/story/153m-drivers-licenses-for-sale-the-kyc-vendor-supply-chain-just-broke-1729): What happened Brian Krebs is reporting that the FBI has opened an investigation into an underground service peddling scans of more than 153 million US driver's…
- [The LinkedIn job offer that came with a Python backdoor](https://top10.dev/story/the-linkedin-job-offer-that-came-with-a-python-backdoor-1734): What happened A developer publishing under roman.pt walked through a LinkedIn recruiter interaction that ended with a malicious repository on his disk. The wri…
- [QubesOS just learned the hard way: error messages are a side channel](https://top10.dev/story/qubesos-just-learned-the-hard-way-error-messages-are-a-side-channel-1727): What happened On August 29, the Qubes team published QSB-118, an advisory disclosing that a compromised or malicious qube could achieve arbitrary code executio…
- [Your IDE now reports to a defense prime. Rerun the procurement review.](https://top10.dev/story/your-ide-now-reports-to-a-defense-prime-rerun-the-procurement-review-1723): What happened Reuters reports SpaceX has agreed to acquire Anysphere, the company behind Cursor, for $60 billion — a roughly 6-7x markup over Anysphere's repor…
- [Stripe walks from PayPal: the payments duopoly stays intact](https://top10.dev/story/stripe-walks-from-paypal-the-payments-duopoly-stays-intact-1728): What happened Stripe and private-equity firm Advent International have walked away from a roughly $50 billion bid to take PayPal private, according to Bloomber…
- [BlackCore: the influence-ops vendor your threat model forgot](https://top10.dev/story/blackcore-the-influence-ops-vendor-your-threat-model-forgot-1724): What happened Reuters reported on June 11 that BlackCore, an Israeli private-sector influence-operations firm, is suspected of covertly meddling in the New Yor…
- [When the emulator fixes your bug for you: a Windows-on-ARM war story](https://top10.dev/story/when-the-emulator-fixes-your-bug-for-you-a-windows-on-arm-war-story-1720): What happened Raymond Chen's latest Old New Thing post (284 points on Hacker News) tells a small story with an outsized lesson. While building the x86 emulator…
- [Bobby Prince, the man who scored Doom's E1M1, has died](https://top10.dev/story/bobby-prince-the-man-who-scored-dooms-e1m1-has-died-1721): What happened Robert C. 'Bobby' Prince III, the composer behind the soundtracks to Doom, Doom II, Wolfenstein 3D, Duke Nukem 3D, and Commander Keen, has died.…
- [Sony is deleting 551 'purchased' movies from PS accounts. Again.](https://top10.dev/story/sony-is-deleting-551-purchased-movies-from-ps-accounts-again-1722): What happened On the PlayStation Store, the button still says Buy. The receipt still says Purchase. The library tab still says My Purchases. And on a date Sony…
- [Agent Runtimes Are Missing a Budget Primitive. DN42 Proved It.](https://top10.dev/story/agent-runtimes-are-missing-a-budget-primitive-dn42-proved-it-1725): What happened A hobbyist operator pointed an autonomous coding agent at DN42 — the volunteer-run experimental BGP overlay that hobbyists use to learn routing —…
- [Ryanair's Checkout Is What Your A/B Testing Stack Optimizes For](https://top10.dev/story/ryanairs-checkout-is-what-your-ab-testing-stack-optimizes-for-1726): What happened Conor O'Sullivan published the 2026 refresh of his Ryanair dark-UX audit on June 12 (blog.osull.com), and it hit 233 points on Hacker News inside…
- [Chrome pulled uBlock Origin from the Web Store. The MV2 era is over.](https://top10.dev/story/chrome-pulled-ublock-origin-from-the-web-store-the-mv2-era-is-over-1719): What happened Google has finished what it started in 2019. Manifest V2 extensions — the class that includes the original uBlock Origin, the gold standard of co…

## Optional

- [llms-full.txt](https://top10.dev/llms-full.txt): everything above plus full editorial bodies (capped ~250KB)
- [Sitemap](https://top10.dev/sitemap-index.xml): canonical URL index
- [News sitemap](https://top10.dev/news-sitemap.xml): last 48 hours, Google News format