Lightnews — Scholar-powered news

Scrum Is Done. Finished. History.

François Zaninotto @francoisz.bsky.social · 11d

Scrum was revolutionary for human teams—but AI doesn't need standups, sprints, or sticky notes.

The future of work requires dual-track agility: a slow lane optimized for human collaboration & meaning, and a fast lane for AI precision & speed.

#agile

substack.jurgenappelo.com/p/scrum-is-d...

We're going to need dual-track business agility.

substack.jurgenappelo.com

Model Context Protocol has prompt injection security problems

Reposted by François Zaninotto

marmelab @marmelab.bsky.social · 13d

Demain, c’est le Forum PHP organisé par l’ @afup.org ! Et devinez quoi ?

@francoisz.bsky.social, CEO de marmelab, sera présent pour vous donner des conseils sur l'évaluation des agents IA ! 🤖

⏰ 12h40 à 13h00
📅 9 octobre 2025
📍 Disneyland Paris

🔗 event.afup.org

#ForumPHP #PHP #Symfony

2 1

François Zaninotto @francoisz.bsky.social · 19d

MCP servers make LLM-powered agents super powerful, but also super vulnerable to all kinds of new attacks. The core vulnerability, prompt injection, is still way too easy to trigger. #Security #AI simonwillison.net/2025/Apr/9/m...

As more people start hacking around with implementations of MCP (the Model Context Protocol, a new standard for making tools available to LLM-powered systems) the security implications of tools built…

simonwillison.net

Do you need a Backend For Frontend?

François Zaninotto @francoisz.bsky.social · 20d

Is your frontend team making 10+ API calls per screen and waiting weeks for backend changes?

New article: When you need a Backend-for-Frontend (and when you don't) 🧵

Real examples from Netflix, SoundCloud + implementation strategies

marmelab.com/blog/2025/10...

When your frontend teams are drowning in API complexity and your backend team is overwhelmed with frontend-specific requests, the BFF pattern might be your lifeline. But is it always the right choice?

Comprehension Debt: The Ticking Time Bomb of LLM-Generated Code

2 5

François Zaninotto @francoisz.bsky.social · 20d

When teams produce code faster than they can understand it, it creates what I’ve been calling “comprehension debt”. [...] When we have to edit the code ourselves, this debt is the extra time it’s going to take us to understand it first. #AI #Coding codemanship.wordpress.com/2025/09/30/c...

An effect that’s being more and more widely reported is the increase in time it’s taking developers to modify or fix code that was generated by Large Language Models. If you’ve wo…

codemanship.wordpress.com

Study and Update on GenAI DevEx

François Zaninotto @francoisz.bsky.social · 26d

Engineers at CloudKitchens are saving 3 hours weekly with #GenAI coding tools, with no decline in code quality. They measured it through careful benchmarks, not industry hype. #DX #DevEx techblog.cloudkitchens.com/p/study-and-...

Internal GenAI developer tools, and learnings about vendors

techblog.cloudkitchens.com

When Code Gets Cheaper Every Day

Reposted by François Zaninotto

marmelab @marmelab.bsky.social · Sep 9

⏰ Plus qu’un mois avant le #ForumPHP2025 !

Rejoignez-nous à Disneyland Paris pour célébrer non seulement les 30 ans de #PHP mais aussi les 25 ans de l' @afup.org, les 20 ans de @symfony.com & les 10 ans d' @api-platform.com ! 🎂

On a hâte de vous y retrouver !

🔗 event.afup.org

3 6

François Zaninotto @francoisz.bsky.social · 28d

Will augmented coding lead to fewer or more programmers? Nobody knows, but some skills matter no matter the outcome: understanding, integration, and judgment. Inspiring thoughts by the great @kentbeck.com. #AI tidyfirst.substack.com/p/programmin...

Programming Deflation

tidyfirst.substack.com

ARTE x Marmelab : Dans les coulisses d’ARTE.tv

Reposted by François Zaninotto

marmelab @marmelab.bsky.social · 28d

ARTE 🤝 Marmelab : Depuis 2016, nous avons la chance de collaborer avec ARTE pour développer des briques essentielles de la plateforme ARTE. tv.

Aujourd'hui, nous vous emmenons dans les coulisses de ce partenariat ! 😉👇

marmelab.com/blog/2025/09...

Interview croisée avec Agathe Michalski, Responsable Technique, et Virginie Rieber, Product Owner chez ARTE, sur la collaboration avec Marmelab.

GitHub - marmelab/shadcn-admin-kit: Component kit to build your Admin app with shadcn/ui

3 6

Reposted by François Zaninotto

marmelab @marmelab.bsky.social · Sep 19

📣 Big news: Atomic CRM just got a makeover!

It now uses @shadcn.com as part of its updated tech stack.

Why @shadcn.com?
✅ You own your code
✅ 100% customizable
✅ Semantic design tokens
👉 Perfect for modern React devs

🔗 Check out Atomic CRM’s new look:
marmelab.com/atomic-crm/

#React #OSS #shadcn

2 6

François Zaninotto @francoisz.bsky.social · Sep 16

Landing page: marmelab.com/shadcn-admin...
GitHub: github.com/marmelab/sha...
Demo: marmelab.com/shadcn-admin...

Component kit to build your Admin app with shadcn/ui - marmelab/shadcn-admin-kit

github.com

4

François Zaninotto @francoisz.bsky.social · Sep 16

The word got out: Shadcn Admin Kit is an open-source #React framework for building single-page-apps with Supabase, react-query, react-hook-form, react-router, and shadcn. #OSS

1 2 7

François Zaninotto @francoisz.bsky.social · Sep 12

Friday rant: Ctrl+Q is way too close to Ctrl+S.

Nothing like trying to save your work and accidentally rage-quitting your entire IDE instead.

Who approved this keyboard layout? Show yourself. 😤

Behind The Scenes of Bun Install

François Zaninotto @francoisz.bsky.social · Sep 12

Fascinating read about all the low-level programming techniques used by Bun to outperform (by an order of magnitude) every other #NodeJS package manager. I learned a lot! bun.com/blog/behind-...

Learn how Bun is able to cut install times by up to 25×. Bun skips Node.js's overhead with direct system calls, cache-friendly data layouts, OS-level copy-on-write, and full-core parallelism.

bun.com

A visual introduction to big O notation.

François Zaninotto @francoisz.bsky.social · Sep 9

Big O notation for beginners, with examples and diagrams. A good reminder of the basics of algorithmic complexity. samwho.dev/big-o/ samwho.dev/big-o/

Big O

samwho.dev

Why LLMs Can't Really Build Software - Zed Blog

François Zaninotto @francoisz.bsky.social · Sep 5

LLMs can write code, but building software requires more than that. #AI #Programming zed.dev/blog/why-llm...

From the Zed Blog: Writing code is only one part of effective software engineering.

zed.dev

The Bright Future Of Developers

François Zaninotto @francoisz.bsky.social · Sep 3

Are AI coding tools going to replace developers, or supercharge them?

In my opinion, AI-augmented assistants like Claude Code and Copilot Agent aren't a threat—they're an opportunity.

#AI #SoftwareDevelopment #Programming

marmelab.com/blog/2025/09...

A new breed of developers is emerging. They ship production code daily but can't write a for loop. They're not imposters – they're the future of programming.

Storing currency values: data types, caveats, best practices

1 2

François Zaninotto @francoisz.bsky.social · Sep 3

Gentle reminder: Never use floating-point data types for storing money amounts #SQL cardinalby.github.io/blog/post/be...

Intro Repeatedly facing questions, debates, and mistakes related to storing and representing currency amounts, I decided to collect all facts and advice regarding this topic in one place. This…

cardinalby.github.io

François Zaninotto @francoisz.bsky.social · Aug 29

Young professionals between the ages of 22 and 25 in AI-intensive occupations—such as software development or customer service—have experienced job losses of 6 to 13 percent since the end of 2022. #Paper #AI digitaleconomy.stanford.edu/wp-content/u...

"Scamlexity": When Agentic AI Browsers Get Scammed

Reposted by François Zaninotto

AFUP @afup.org · Aug 27

Les IA sont au cœur des préoccupations des devs, et ont donc une bonne place au sein du programme du Forum PHP 2025 : @francoisz.bsky.social nous parlera des outils et techniques visant perfectionner les agents IA , et nous apporte un premier éclairage dans l'interview du jour.
buff.ly/Dz5q6HJ

2 4

François Zaninotto @francoisz.bsky.social · Aug 26

Scammers just got superpowers: With Agentic AI browsers like Edge Copilot or Comet, the old phishing tricks fool the agent in no time. Don't us ethem for anything remotely personal. #Security #AI guard.io/labs/scamlex...

We Put Agentic AI Browsers to the Test - They Clicked, They Paid, They Failed

guard.io

Atlassian's Trello redesign may be 'worst in tech history'

François Zaninotto @francoisz.bsky.social · Aug 26

I find the new Trello #UI awful. It seems I'm not the only one. Atlassian is engaged in the classic enshittification process that has plagued small apps bought by giant editors in the past 20 years. So sad. www.theregister.com/2025/08/06/t...

UPDATED: Customers compare upgrade to Microsoft's mega-messy Windows 8

www.theregister.com