Content by DevClass (14)

DevClass reports on GitHub briefly offering to mail a CD-ROM copy of a public repository via a Microsoft Form, then pulling the offer after confusion and ridicule. The piece highlights how the stunt intersected with developer concerns about GitHub reliability, repo sizes, and long-term access to source code.

DevClass reports on renewed community criticism of Microsoft’s .NET support lifecycle, arguing that the three-year LTS window is too short for enterprise upgrade and adoption cycles and can leave only a one-year window to move between LTS releases.

DevClass reports on Vercel’s Ship event announcements, focusing on the new open source eve agent framework and enterprise controls like Passport for bringing AI-built apps and agents under centralized identity and policy, including OpenID Connect support for providers such as Okta and Microsoft Entra ID.

DevClass reports on upcoming npm 12 default changes that stop install-time scripts from running automatically, aiming to reduce a major supply-chain attack surface on developer machines and CI runners. The piece explains the new flags, breaking-change impact, and how teams can prepare using npm 11.x settings.

DevClass reports on Checkmarx survey findings that many developers believe AI-generated code contains more vulnerabilities, yet some still ship it to production. The piece connects AI-assisted development, open source supply-chain risk, and security process gaps to higher breach frequency.

DevClass rounds up Microsoft Build announcements that matter to developers, including new Windows sandboxing for AI agents (MXC), an Arm-based Surface RTX Spark Dev Box, GitHub Enterprise Local for connected or air-gapped environments, Azure Linux updates, and Microsoft-maintained Coreutils for Windows.

DevClass reports on .NET Aspire 13.4, highlighting the general availability of the TypeScript AppHost and new integrations that broaden Aspire beyond C#-only workflows. The piece also covers deployment targets (including Azure and Kubernetes), the Aspire dashboard’s OpenTelemetry-based observability, and notable Kubernetes-related improvements.

DevClass reports on a multi-hour GitHub Actions outage that surfaced an incorrect “Your account is suspended” error, why Actions downtime can block CI/CD even when developers can still code locally, and what GitHub’s incident updates said about authentication issues and follow-on data cleanup.

DevClass reports on GitHub’s investigation into a poisoned VS Code extension that led to exfiltration of internal repositories, and the downstream risks for credentials, private code exposure, and follow-on access if stolen secrets were present.

DevClass reports on a Shai-Hulud supply-chain attack where a compromised npm account published malware into 314 packages, then hid reports by closing GitHub issues. The piece summarizes the payload’s credential-stealing behavior and practical cleanup steps like rotating secrets and checking for unauthorized repos and services.

DevClass reports on TanStack’s incident follow-up after a supply-chain attack that abused a GitHub Actions workflow to run untrusted code and poison shared caches, and on the project’s proposed hardening steps—including potentially moving to invitation-only pull requests.

DevClass reports on Microsoft’s claimed WinUI 3 performance improvements, including a 25% speed-up in File Explorer areas built with WinUI and reductions in memory allocations and function calls, alongside developer concerns about WinUI 3 responsiveness versus WPF and UWP.

DevClass reports on the Zed editor reaching version 1.0, covering its Rust-based architecture, GPU-accelerated UI, built-in language server support, and the editor’s growing set of AI features (including agents) alongside an option to disable AI entirely.

DevClass reports on Godot maintainers dealing with a surge of low-quality, LLM-generated pull requests, and summarizes community reactions plus GitHub’s planned and existing controls (like PR restrictions and upcoming PR deletion) to reduce review burden.