TLDR Dev 2026-02-12

Big changes are coming at Expo:

1️⃣ The Expo SDK 55 includes Hermes v1 opt-in for performance gains, revamped project templates with native tabs, and stable Android blur support.

↳ Plus Hermes bytecode diffing reduces download sizes by 75%.

2️⃣ A new brownfield integration experience makes adding Expo to native apps cleaner than ever.

3️⃣ It ships with React Native 0.83, React 19, and Expo Router v7.

Read the blog

An AI system autonomously found real zero-days in Node.js and React, such as a sandbox escape via Unix sockets and a DoS that could crash any Next.js app, by performing a full security researcher workflow without human help. LLM hallucination, usually a liability, turns into a strength for imagining creative attack scenarios that traditional scanners miss.

JavaScript is getting a using keyword, the first new way to declare a variable since const and let in 2015. It automatically cleans up resources (file handles, connections, and streams) when they go out of scope, so you don't have to remember to call close() or abort() yourself. It already works in every major browser except Safari.

Claude Code version 2.1.20 shipped a change that replaced detailed file and search information with generic summaries. Users widely complained, demanding the return of specific file paths or a simple toggle, but Anthropic dismissed this feedback, saying the change simplified things for a majority.

One-on-one meetings with your manager are a high-leverage opportunity for career growth, yet they are frequently wasted on mere status updates. To maximize their value, these meetings should ideally incorporate three types of conversations: current status, career development, and strategic future discussions.

Chaotic work environments, like cluttered desks or numerous open tabs, hinder productivity and cause frustration. The "secret" to better work isn't more organization, but rather starting with "nothing,” a completely clear work surface. This clear surface is for items needing immediate action, distinct from designated storage areas.

Join 10,000+ developers at the world's leading dev event. Learn from industry leaders at Docker, Netflix, Atlassian, Sentry, Datadog, and more. Don't miss the Early Supporter pricing and get an additional 10% off with code TLDR.

Secure your Early Supporter Pass now

Fluorite is a console-grade game engine fully integrated with Flutter, allowing developers to write game code directly in Dart and use Flutter's tools. At its core, it uses a high-performance C++ ECS architecture, optimized for lower-end hardware while offering familiar high-level Dart APIs. The engine simplifies spatial 3D UI development with model-defined touch trigger zones and speeds up iteration with Flutter's Hot Reload feature.

Npmx is a fast, modern browser for the npm registry.

Datadog identified an active campaign using fake GitHub repositories to impersonate software companies and distribute infostealers using the "ClickFix" social engineering technique. Victims are lured to malicious pages that instruct them to copy-paste commands into their terminal, leading to the execution of macOS infostealers like MacSync and SHub Stealer.

With vibe-coded apps flooding the stores and ad costs up 60%, there are other alternatives to increase mobile app downloads. For example, nail your ASO (it drives 65% of organic installs), write app descriptions like humans talk (for voice search), make screenshots sell outcomes not UI, get above 4 stars, and use behavior-triggered push notifications in the first 3 days before users churn.

For founders considering open-source, the decision is a deliberate architectural and business strategy, not a distribution hack or value statement, that requires careful evaluation of user-contributor alignment, problem maturity, and monetization boundaries.

Email recipients should not apologize for late replies, since email is an asynchronous communication tool for which most have no expectation of an immediate response.

Beginning with Shopify in April 2025, "AI-first" memos from CEOs and leaders quickly became a widespread genre across various sectors, mandating AI integration, reshaping employee expectations, and driving significant operational and investment changes.

GLM-5 is a newly launched, open-source LLM that scales its architecture and training to achieve best-in-class performance among open-source models for reasoning, coding, and complex agentic tasks, approaching frontier models.

As the first engineer on TLDR's new Applied AI team, you'll build AI agents and composable Claude Skills to let non-technical teammates create their own AI workflows. Learn more.