# top10.dev

> Autonomous, AI-curated rankings of developer tools and a daily editorial feed of dev/tech news. Updated continuously. Free to crawl, cite, and quote with attribution to https://top10.dev.

## Databases
> The best databases for modern applications — from PostgreSQL to the newest contenders

- [PostgreSQL](https://top10.dev/tool/postgresql): The world's most advanced open source relational database. Battle-tested, extensible, and loved by developers worldwide.
- [Neon](https://top10.dev/tool/neon): Serverless Postgres that scales to zero. Branching for dev/preview environments. The future of Postgres hosting.
- [Supabase](https://top10.dev/tool/supabase): The open source Firebase alternative. Postgres under the hood with auth, storage, and realtime built in.
- [PlanetScale](https://top10.dev/tool/planetscale): MySQL-compatible serverless database with non-blocking schema changes. Built on Vitess.
- [MongoDB](https://top10.dev/tool/mongodb): The original document database. Flexible schema, horizontal scaling, and a massive ecosystem.
- [Redis](https://top10.dev/tool/redis): In-memory data store used for caching, sessions, queues, and real-time features. Incredibly fast.
- [SQLite](https://top10.dev/tool/sqlite): The most deployed database in the world. Zero-config, serverless, single-file. Perfect for edge and embedded.
- [CockroachDB](https://top10.dev/tool/cockroachdb): Distributed SQL database that survives anything. PostgreSQL wire-compatible with global scale.
- [Turso](https://top10.dev/tool/turso): SQLite for production. Edge-replicated, embedded database powered by libSQL. Incredibly low latency.
- [DynamoDB](https://top10.dev/tool/dynamodb): AWS's fully managed NoSQL database. Infinite scale, single-digit millisecond performance at any scale.
- [Full ranking →](https://top10.dev/rankings/databases)

## Hosting & Deployment
> Where to ship your code — cloud platforms, serverless, and everything in between

- [Vercel](https://top10.dev/tool/vercel): The frontend cloud. Deploy instantly, scale automatically. The gold standard for Next.js and frontend deployments.
- [Cloudflare](https://top10.dev/tool/cloudflare): Workers, Pages, R2, D1 — an entire cloud platform at the edge. Incredibly fast and surprisingly affordable.
- [Railway](https://top10.dev/tool/railway): Deploy anything in seconds. Postgres, Redis, cron jobs — all from a beautiful dashboard. The new Heroku.
- [Render](https://top10.dev/tool/render): Cloud application platform. Auto-deploys from Git, free SSL, managed databases. Simple and reliable.
- [Fly.io](https://top10.dev/tool/flyio): Deploy apps close to users. Run full Linux VMs at the edge. Great for globally distributed applications.
- [AWS](https://top10.dev/tool/aws): The cloud giant. 200+ services for everything you could ever need. Complex but infinitely powerful.
- [DigitalOcean](https://top10.dev/tool/digitalocean): Simple cloud for developers. Droplets, App Platform, managed databases. The friendly cloud.
- [Netlify](https://top10.dev/tool/netlify): The original JAMstack host. Great for static sites and frontend deployments with serverless functions.
- [Hetzner](https://top10.dev/tool/hetzner): European cloud with unbeatable pricing. Bare metal and cloud servers at a fraction of AWS costs.
- [Google Cloud](https://top10.dev/tool/gcp): Google's cloud platform. Strong in AI/ML, data analytics, and Kubernetes. GKE is best-in-class.
- [Full ranking →](https://top10.dev/rankings/hosting)

## Frontend Frameworks
> The frameworks powering the web — ranked by DX, performance, and ecosystem

- [React](https://top10.dev/tool/react): The library that changed frontend development. Component-based, massive ecosystem, backed by Meta.
- [Next.js](https://top10.dev/tool/nextjs): The React framework. SSR, SSG, API routes, and more. Full-stack React made easy.
- [Svelte](https://top10.dev/tool/svelte): Cybernetically enhanced web apps. Compiles to vanilla JS with no virtual DOM. Incredibly fast and fun.
- [Vue.js](https://top10.dev/tool/vuejs): The progressive framework. Easy to learn, powerful to scale. Great documentation and welcoming community.
- [Astro](https://top10.dev/tool/astro): The web framework for content-driven websites. Islands architecture, zero JS by default. SEO dream.
- [SolidJS](https://top10.dev/tool/solidjs): Simple and performant reactivity for building user interfaces. Fine-grained reactivity without a virtual DOM.
- [Angular](https://top10.dev/tool/angular): The enterprise framework. Full-featured, opinionated, and backed by Google. Signals make it modern.
- [htmx](https://top10.dev/tool/htmx): High power tools for HTML. Access AJAX, CSS transitions, WebSockets directly from HTML attributes.
- [Remix](https://top10.dev/tool/remix): Full-stack web framework focused on web standards and modern UX. Nested routing done right.
- [Qwik](https://top10.dev/tool/qwik): The HTML-first framework. Instant-on with resumability — no hydration. Built for speed.
- [Full ranking →](https://top10.dev/rankings/frontend-frameworks)

## Authentication
> Auth solutions so you never have to roll your own again

- [Clerk](https://top10.dev/tool/clerk): Drop-in authentication and user management. Beautiful pre-built components with deep framework integration.
- [Auth.js](https://top10.dev/tool/authjs): Authentication for the web. Open source, framework-agnostic. Formerly NextAuth.js — now supports everything.
- [Supabase Auth](https://top10.dev/tool/supabase-auth): Authentication baked into Supabase. Email, social, phone auth with row-level security.
- [Firebase Auth](https://top10.dev/tool/firebase-auth): Google's authentication service. Easy setup, many providers, great for mobile and web.
- [Lucia](https://top10.dev/tool/lucia): Auth library with zero vendor lock-in. Lightweight, framework-agnostic, and fully open source.
- [Auth0](https://top10.dev/tool/auth0): Enterprise identity platform by Okta. Powerful, flexible, and battle-tested at scale.
- [Keycloak](https://top10.dev/tool/keycloak): Open source identity and access management. Self-hosted, enterprise-grade, highly configurable.
- [WorkOS](https://top10.dev/tool/workos): Auth for B2B SaaS. SSO, SCIM, and directory sync that enterprise customers demand.
- [Stytch](https://top10.dev/tool/stytch): Passwordless authentication API. Magic links, OTPs, OAuth — modern auth without passwords.
- [Passport.js](https://top10.dev/tool/passportjs): The classic Node.js auth middleware. 500+ strategies, battle-tested, and still going strong.
- [Full ranking →](https://top10.dev/rankings/auth)

## CI/CD
> Pipelines that ship code — automated testing, building, and deployment from commit to production

- [GitHub Actions](https://top10.dev/tool/github-actions): CI/CD baked right into GitHub. Thousands of marketplace actions, matrix builds, and zero infrastructure to manage.
- [GitLab CI](https://top10.dev/tool/gitlab-ci): Fully integrated CI/CD in GitLab. Auto DevOps, environments, and a single platform for the entire DevOps lifecycle.
- [Dagger](https://top10.dev/tool/dagger): Programmable CI/CD using actual code. Define pipelines in Go, Python, or TypeScript — run anywhere.
- [CircleCI](https://top10.dev/tool/circleci): Cloud CI/CD that's been around forever. Orbs for reusable config, smart caching, and reliable performance.
- [Buildkite](https://top10.dev/tool/buildkite): Hybrid CI/CD — cloud orchestration with your own agents. Scales to thousands of builds per day.
- [Argo CD](https://top10.dev/tool/argocd): GitOps continuous delivery for Kubernetes. Declarative, syncs cluster state to Git automatically.
- [Jenkins](https://top10.dev/tool/jenkins): The OG CI/CD server. Self-hosted, plugin ecosystem with 1800+ plugins. Still running half the world's pipelines.
- [Drone](https://top10.dev/tool/drone): Container-native CI. Define pipelines in YAML, runs every step in Docker containers. Lightweight and fast.
- [Tekton](https://top10.dev/tool/tekton): Cloud-native CI/CD building blocks for Kubernetes. The foundation for many enterprise pipeline platforms.
- [Travis CI](https://top10.dev/tool/travis-ci): One of the original hosted CI services. Open source pioneer, now under Idera ownership.
- [Full ranking →](https://top10.dev/rankings/cicd)

## AI/ML Tools
> The platforms and frameworks powering the AI revolution — from LLMs to model serving

- [OpenAI API](https://top10.dev/tool/openai-api): The API that started the LLM revolution. GPT-4o, o1, embeddings, DALL-E — the benchmark everything else is measured against.
- [Hugging Face](https://top10.dev/tool/hugging-face): The GitHub of AI. 900k+ models, datasets, and Spaces. The hub of the open-source ML ecosystem.
- [Anthropic Claude](https://top10.dev/tool/anthropic-claude): The safety-first frontier model. Claude 3.5 Sonnet and Claude 3 Opus lead on reasoning, coding, and long context.
- [LangChain](https://top10.dev/tool/langchain): The framework for LLM applications. Chains, agents, RAG — the glue between your code and language models.
- [Ollama](https://top10.dev/tool/ollama): Run LLMs locally. Pull and run Llama, Mistral, Gemma, and 100+ models with a single command.
- [Together AI](https://top10.dev/tool/together-ai): Fastest inference cloud for open-source models. Run Llama, Mistral, Flux and 200+ models at scale.
- [Replicate](https://top10.dev/tool/replicate): Run ML models in the cloud via API. Image generation, video, audio — deploy any model with one line.
- [Weights & Biases](https://top10.dev/tool/weights-and-biases): The MLOps platform. Experiment tracking, model versioning, dataset management. How serious ML teams work.
- [MLflow](https://top10.dev/tool/mlflow): Open source platform for the ML lifecycle. Track experiments, package models, deploy anywhere.
- [vLLM](https://top10.dev/tool/vllm): High-throughput LLM inference engine. PagedAttention delivers 24x higher throughput than HuggingFace Transformers.
- [Full ranking →](https://top10.dev/rankings/ai-ml-tools)

## Monitoring & Observability
> See everything, fix anything — logging, metrics, tracing, and alerting for production systems

- [Datadog](https://top10.dev/tool/datadog): The all-in-one observability platform. Metrics, logs, traces, APM, and security — unified in one pane of glass.
- [Sentry](https://top10.dev/tool/sentry): Error tracking and performance monitoring. The first thing to add to any production app — catch bugs before users report them.
- [Grafana](https://top10.dev/tool/grafana): The open observability platform. Stunning dashboards for any data source — Prometheus, Loki, Tempo, and 300+ more.
- [Prometheus](https://top10.dev/tool/prometheus): The de-facto standard for metrics. Pull-based, time-series database with a powerful query language (PromQL).
- [New Relic](https://top10.dev/tool/new-relic): Full-stack observability platform. APM, infrastructure, browser, and mobile monitoring with ML-powered insights.
- [PagerDuty](https://top10.dev/tool/pagerduty): Incident response and on-call management. Route alerts, manage escalations, and run postmortems like a pro.
- [Honeycomb](https://top10.dev/tool/honeycomb): Observability for complex systems. High-cardinality events, BubbleUp for finding anomalies, and query-driven debugging.
- [Axiom](https://top10.dev/tool/axiom): Cloud-native log management. Ingest billions of events, query instantly, pay per query not per ingestion.
- [Elastic/ELK](https://top10.dev/tool/elastic-elk): The ELK Stack: Elasticsearch, Logstash, Kibana. Self-hosted or cloud. The original log aggregation powerhouse.
- [Chronosphere](https://top10.dev/tool/chronosphere): Cloud-native observability built for scale. Prometheus-compatible with 50x cost reduction via metrics reduction.
- [Full ranking →](https://top10.dev/rankings/monitoring)

## Backend Frameworks
> The engines under the hood — ranked by performance, DX, and ecosystem strength

- [Express.js](https://top10.dev/tool/expressjs): The minimalist Node.js framework. Simple, fast, and unopinionated. The backbone of half the web.
- [FastAPI](https://top10.dev/tool/fastapi): Modern Python API framework with automatic docs. Async-first, type-validated, OpenAPI out of the box.
- [Django](https://top10.dev/tool/django): The batteries-included Python framework. ORM, admin panel, auth, forms — everything out of the box.
- [NestJS](https://top10.dev/tool/nestjs): Progressive Node.js framework. TypeScript-first, Angular-inspired architecture for scalable server-side apps.
- [Rails](https://top10.dev/tool/rails): Convention over configuration. Ruby on Rails invented modern web development — still delivering developer happiness.
- [Go Gin](https://top10.dev/tool/go-gin): Blazing fast HTTP framework for Go. Minimal, no magic, just raw performance with a clean API.
- [Hono](https://top10.dev/tool/hono): The ultrafast web framework for the edge. Cloudflare Workers, Deno, Bun — runs anywhere JS runs.
- [Spring Boot](https://top10.dev/tool/spring-boot): The enterprise Java standard. Auto-configuration, embedded servers, and the entire Spring ecosystem.
- [Actix Web](https://top10.dev/tool/actix-web): One of the fastest web frameworks on the planet. Rust-powered, actor-model, type-safe to the core.
- [Phoenix](https://top10.dev/tool/phoenix): Real-time web framework for Elixir. LiveView makes server-rendered real-time apps trivial.
- [Full ranking →](https://top10.dev/rankings/backend-frameworks)

## Latest Stories

- [GitHub: 3,800 repos exfiltrated by a single malicious VSCode extension](https://top10.dev/story/github-3800-repos-exfiltrated-by-a-single-malicious-vscode-extension-732): What happened GitHub has confirmed that a malicious Visual Studio Code extension exfiltrated data from 3,800 repositories before being detected and removed fro…
- [GitLab Kills Its CREDIT Values and Cuts Staff. Culture Debt Comes Due.](https://top10.dev/story/gitlab-kills-its-credit-values-and-cuts-staff-culture-debt-comes-due-736): What happened GitLab published a blog post titled "GitLab Act 2," announcing two simultaneous changes that sent its developer community into parsing mode: a wo…
- [Every App Wants to Be Emacs Now. That's Not a Compliment.](https://top10.dev/story/every-app-wants-to-be-emacs-now-thats-not-a-compliment-738): What happened Thomas Ptacek — security researcher, Hacker News fixture, and co-founder of the former Matasano Security — published "The Emacsification of Softw…
- [SpaceX's S-1: Starlink is the business, rockets are the marketing](https://top10.dev/story/spacexs-s-1-starlink-is-the-business-rockets-are-the-marketing-733): What happened SpaceX has filed a Form S-1 with the U.S. Securities and Exchange Commission, formally registering shares of Space Exploration Technologies Corp.…
- [MIT Loses 20% of Incoming Grad Students. The Talent Pipeline Is Breaking.](https://top10.dev/story/mit-loses-20-of-incoming-grad-students-the-talent-pipeline-is-breaking-739): What happened MIT President Sally Kornbluth released a public message addressing what she called a crisis in the American research talent pipeline. ==The headl…
- [SpiderMonkey is killing the asm.js optimizer. WebAssembly won.](https://top10.dev/story/spidermonkey-is-killing-the-asmjs-optimizer-webassembly-won-741): What happened Mozilla announced on the SpiderMonkey blog that it is removing the asm.js-specific ahead-of-time compilation pipeline from Firefox's JavaScript e…
- [Bun's Rust Rewrite Fails Miri: Undefined Behavior Found in Safe Code](https://top10.dev/story/buns-rust-rewrite-fails-miri-undefined-behavior-found-in-safe-code-735): What happened A community member opened issue 30719 on Bun's GitHub repository, reporting that the JavaScript runtime's in-progress Rust rewrite fails basic Mi…
- [OpenAI's model just killed a 40-year geometry conjecture](https://top10.dev/story/openais-model-just-killed-a-40-year-geometry-conjecture-734): What happened OpenAI announced that one of its reasoning models produced a counterexample disproving a long-standing conjecture in discrete geometry — the kind…
- [Flipper One specs land: it's a pocket Kali box, not a Zero upgrade](https://top10.dev/story/flipper-one-specs-land-its-a-pocket-kali-box-not-a-zero-upgrade-740): What happened Flipper Devices quietly pushed the Flipper One tech specs page to docs.flipper.net, and Hacker News surfaced it to 311 points within hours. The p…
- [Mitchell Hashimoto: Entire Companies Are Now Under 'AI Psychosis'](https://top10.dev/story/mitchell-hashimoto-entire-companies-are-now-under-ai-psychosis-737): What Happened Mitchell Hashimoto — co-founder of HashiCorp, creator of Terraform and Vagrant, and one of the most respected infrastructure engineers of the las…
- [Hardware Attestation Doesn't Verify Security. It Verifies Obedience.](https://top10.dev/story/hardware-attestation-doesnt-verify-security-it-verifies-obedience-729): What Happened GrapheneOS — the security-focused Android fork that runs on Google Pixel hardware — published a detailed critique of how hardware attestation fun…
- [A Security Engineer Ripped the Modem Out of His RAV4. Here's Why.](https://top10.dev/story/a-security-engineer-ripped-the-modem-out-of-his-rav4-heres-why-730): What happened Arkadiy Tetelman — a security engineer known for his technical deep-dives on privacy and application security — published a detailed walkthrough…
- [A Fields Medalist Stress-Tests ChatGPT 5.5 Pro — and the Results Are Complicated](https://top10.dev/story/a-fields-medalist-stress-tests-chatgpt-55-pro-and-the-results-are-complicated-724): What Happened On May 8, 2026, Sir Timothy Gowers — one of the most distinguished living mathematicians, a Fields Medal laureate, and Rouse Ball Professor at Ca…
- [DOJ Wants 100K App Users Doxxed Over Car Mods. App Stores Are the Weak Link.](https://top10.dev/story/doj-wants-100k-app-users-doxxed-over-car-mods-app-stores-are-the-weak-link-727): What happened The U.S. Department of Justice has issued legal demands to both Apple and Google, requiring them to hand over identifying information on more tha…
- [Pixel 10 Hit by Full 0-Click Exploit Chain — What Devs Need to Know](https://top10.dev/story/pixel-10-hit-by-full-0-click-exploit-chain-what-devs-need-to-know-731): What happened Google's Project Zero team published a detailed write-up of a complete 0-click exploit chain targeting the Pixel 10 — Google's current flagship r…
- [Antirez Unveils DS4: What Comes After You Build Redis](https://top10.dev/story/antirez-unveils-ds4-what-comes-after-you-build-redis-723): What happened Salvatore Sanfilippo — known universally as antirez — published a detailed blog post titled "A few words on DS4" on his personal site (antirez.co…
- [npm's Supply Chain Problem Isn't a Mystery. It's a Choice.](https://top10.dev/story/npms-supply-chain-problem-isnt-a-mystery-its-a-choice-726): What happened A blog post titled "'No way to prevent this,' says only package manager where this regularly happens" went viral on Hacker News this week, borrow…
- [Your Mullvad Exit IP Is More Unique Than You Think](https://top10.dev/story/your-mullvad-exit-ip-is-more-unique-than-you-think-722): What happened A researcher publishing under the handle tmctmt released a detailed analysis of how Mullvad VPN exit IP addresses can function as a fingerprintin…
- [Debian Finally Makes Reproducible Builds Non-Negotiable](https://top10.dev/story/debian-finally-makes-reproducible-builds-non-negotiable-725): What happened Debian's project leadership posted to debian-devel-announce on May 2026 declaring that ==all packages shipping in the next stable release must pr…
- [AI Is a Technology, Not a Product — and That Changes Everything](https://top10.dev/story/ai-is-a-technology-not-a-product-and-that-changes-everything-728): The Argument John Gruber, writing at Daring Fireball, published a piece this week that landed with a 404-point score on Hacker News — fitting, perhaps, for an…
- [Canada's Bill C-22: Same Surveillance Bill, New Number](https://top10.dev/story/canadas-bill-c-22-same-surveillance-bill-new-number-720): What happened The Canadian government has introduced Bill C-22, a cybersecurity and telecom regulation bill that the Electronic Frontier Foundation calls a "re…
- [DOJ Wants Names of 100K Car Tuners — Your App Store Data Is the Warrant](https://top10.dev/story/doj-wants-names-of-100k-car-tuners-your-app-store-data-is-the-warrant-718): What happened The U.S. Department of Justice has issued legal demands to Apple and Google requiring them to hand over identifying information for more than 100…
- [The SWE Career Contraction Is Already Measurable — Here's What the Numbers Say](https://top10.dev/story/the-swe-career-contraction-is-already-measurable-heres-what-the-numbers-say-721): What the data actually shows Sean Goedecke, a GitHub engineer, published an essay arguing that software engineering may no longer be a reliable 40-year career.…
- [The Hand-Written Code Backlash: Why Some Devs Are Ditching AI](https://top10.dev/story/the-hand-written-code-backlash-why-some-devs-are-ditching-ai-714): What happened A developer writing at blog.k10s.dev published "I'm going back to writing code by hand" — a personal account of abandoning AI coding assistants a…
- [TanStack Supply-Chain Attack Hit 42 npm Packages via GitHub Actions Exploit](https://top10.dev/story/tanstack-supply-chain-attack-hit-42-npm-packages-via-github-actions-exploit-712): What happened On May 11, 2026, an attacker executed one of the most technically sophisticated npm supply-chain attacks to date, compromising 42 @tanstack/ pack…
- [Debian Just Made Reproducible Builds Mandatory. Here's What Breaks.](https://top10.dev/story/debian-just-made-reproducible-builds-mandatory-heres-what-breaks-717): What happened Debian's development mailing list posted a formal announcement: reproducible builds are now a must requirement for package uploads. The policy ch…
- [Bambu Lab Sues an Open-Source Slicer Dev. The 3D Printing Community Is Done.](https://top10.dev/story/bambu-lab-sues-an-open-source-slicer-dev-the-3d-printing-community-is-done-719): What Happened Bambu Lab, the Chinese 3D printer manufacturer that rocketed to market dominance with its fast, reliable consumer printers, has taken legal actio…
- [Bun's Rust Rewrite Has Undefined Behavior in Safe Code. That's a Problem.](https://top10.dev/story/buns-rust-rewrite-has-undefined-behavior-in-safe-code-thats-a-problem-713): What happened A GitHub issue filed against the Bun JavaScript runtime (oven-sh/bun30719) has ignited a sharp debate in the systems programming community. The i…
- [Nvidia Just Made Rust a First-Class GPU Language](https://top10.dev/story/nvidia-just-made-rust-a-first-class-gpu-language-716): What happened Nvidia Labs published cuda-oxide, an experimental compiler that takes standard Rust code and compiles it directly to PTX — the intermediate repre…
- [A Suicide Prevention Site Was Leaking Visitor Data to Ad Tech](https://top10.dev/story/a-suicide-prevention-site-was-leaking-visitor-data-to-ad-tech-715): What happened Dutch suicide prevention organization 113 Zelfmoordpreventie — the Netherlands' primary crisis line and online mental health resource — has been…
- [The Wayback Machine Is Under Threat. Developers Should Care.](https://top10.dev/story/the-wayback-machine-is-under-threat-developers-should-care-710): What happened A campaign at savethearchive.com is calling on the public to pressure three major news publishers — The New York Times, The Atlantic, and USA Tod…
- [France Wants Backdoors in Signal and WhatsApp. Here's Why It Won't Work.](https://top10.dev/story/france-wants-backdoors-in-signal-and-whatsapp-heres-why-it-wont-work-702): What happened France is moving forward with legislation that would compel encrypted messaging services — Signal, WhatsApp, Telegram, and others — to provide la…
- [The Curl Maintainer Who Called AI Bug Reports Garbage Just Got Proven Wrong](https://top10.dev/story/the-curl-maintainer-who-called-ai-bug-reports-garbage-just-got-proven-wrong-711): What Happened Daniel Stenberg, the creator and sole lead maintainer of curl — the ubiquitous data transfer tool installed on roughly 20 billion devices — publi…
- [Meta Kills Instagram DM Encryption — What It Means for Your App's E2EE Strategy](https://top10.dev/story/meta-kills-instagram-dm-encryption-what-it-means-for-your-apps-e2ee-strategy-706): What happened Meta has shut down end-to-end encryption for Instagram's direct messaging system, reversing a privacy feature the company spent years developing…
- [Europe's Gov Sites Are a Security Disaster: The Numbers Are Brutal](https://top10.dev/story/europes-gov-sites-are-a-security-disaster-the-numbers-are-brutal-707): What happened The Internet Cleanup Foundation — a Dutch nonprofit that previously built internet.nl, a widely-used standards compliance checker — has published…
- [MIT Loses 20% of Incoming Grad Students. The Talent Pipeline Is Breaking.](https://top10.dev/story/mit-loses-20-of-incoming-grad-students-the-talent-pipeline-is-breaking-704): What happened MIT President Sally Kornbluth released a message to the MIT community addressing what she called a crisis in the university's "funding and talent…
- [Six New CVEs Hit dnsmasq — Patch Your DNS Infrastructure Now](https://top10.dev/story/six-new-cves-hit-dnsmasq-patch-your-dns-infrastructure-now-708): What happened CERT/CC is releasing six CVEs for serious security vulnerabilities in dnsmasq, the ubiquitous lightweight DNS forwarder and DHCP server maintaine…
- [A Security Researcher Ripped the Modem Out of His RAV4. Here's How.](https://top10.dev/story/a-security-researcher-ripped-the-modem-out-of-his-rav4-heres-how-705): What happened Security researcher arkadiyt — known in the infosec community for browser extension security audits and supply chain analysis — published a detai…
- [What Gowers' ChatGPT 5.5 Pro Test Actually Reveals About LLM Reasoning](https://top10.dev/story/what-gowers-chatgpt-55-pro-test-actually-reveals-about-llm-reasoning-709): What happened Sir Timothy Gowers — Fields Medalist, combinatorialist, and one of the most respected living mathematicians — published a detailed blog post on M…
- [Bambu Lab Took From Open Source, Then Locked the Door Behind Them](https://top10.dev/story/bambu-lab-took-from-open-source-then-locked-the-door-behind-them-703): What happened Jeff Geerling — open source advocate, Ansible author, and one of the most-watched voices in the 3D printing community — published a detailed tear…
- [Turso Kills Its Bug Bounty Program. Blame the AI Slop.](https://top10.dev/story/turso-kills-its-bug-bounty-program-blame-the-ai-slop-701): What happened Turso, the company behind libSQL and the Turso edge database platform, announced it is retiring its bug bounty program. The reason isn't budget c…
- [GitLab Kills Its Famous CREDIT Values and Cuts Staff in 'Act 2' Reset](https://top10.dev/story/gitlab-kills-its-famous-credit-values-and-cuts-staff-in-act-2-reset-700): What happened GitLab published a blog post titled "GitLab Act 2," announcing a workforce reduction and — more culturally significant — the retirement of its CR…
- [Project Zero's Pixel 10 0-Click Chain: From RCS Message to Root](https://top10.dev/story/project-zeros-pixel-10-0-click-chain-from-rcs-message-to-root-692): What happened Google's Project Zero team published a detailed technical writeup of a full 0-click remote code execution chain targeting the Pixel 10, Google's…
- [Android's VPN Kill Switch Doesn't Kill Everything — GrapheneOS Fixed It](https://top10.dev/story/androids-vpn-kill-switch-doesnt-kill-everything-grapheneos-fixed-it-695): What happened GrapheneOS, the privacy-focused Android fork, has shipped a fix for a VPN traffic leak in Android that Google was notified about but declined to…
- [California Says You Can't Just Kill a Game People Paid For](https://top10.dev/story/california-says-you-cant-just-kill-a-game-people-paid-for-694): What Happened A California bill that would force game publishers to either patch their games for offline play or issue refunds when shutting down servers has c…
- [Agent Skills: The Standard 35 AI Tools Agreed On While You Weren't Looking](https://top10.dev/story/agent-skills-the-standard-35-ai-tools-agreed-on-while-you-werent-looking-696): What Happened Anthropic's anthropics/skills repository surged past 131,000 GitHub stars, but the star count is the least interesting part of this story. The re…
- [Meta's AI Pivot Has a People Problem Nobody Wants to Talk About](https://top10.dev/story/metas-ai-pivot-has-a-people-problem-nobody-wants-to-talk-about-697): What Happened The New York Times reported on May 8 that Meta's aggressive embrace of AI is making its employees miserable. The story, which hit 346 points on H…
- [Your Privacy VPN Is a Tracking Beacon: Mullvad Exit IPs as Fingerprints](https://top10.dev/story/your-privacy-vpn-is-a-tracking-beacon-mullvad-exit-ips-as-fingerprints-698): What happened A detailed technical analysis published by researcher tmctmt demonstrates that Mullvad VPN's exit IP addresses — the very infrastructure meant to…
- [The Line Between Vibe Coding and Agentic Engineering Is Dissolving](https://top10.dev/story/the-line-between-vibe-coding-and-agentic-engineering-is-dissolving-699): What happened Simon Willison — Django co-creator, prolific open-source contributor, and one of the most consistently rigorous voices on AI-assisted development…
- [Bun Is Rewriting Itself in Rust — and It Already Passes 99.8% of Tests](https://top10.dev/story/bun-is-rewriting-itself-in-rust-and-it-already-passes-998-of-tests-693): What happened Jarred Sumner, creator of Bun, announced that the experimental Rust rewrite of the Bun JavaScript runtime has reached 99.8% test compatibility on…

## Optional

- [llms-full.txt](https://top10.dev/llms-full.txt): everything above plus full editorial bodies (capped ~250KB)
- [Sitemap](https://top10.dev/sitemap-index.xml): canonical URL index
- [News sitemap](https://top10.dev/news-sitemap.xml): last 48 hours, Google News format