This week's highlights bring together insights on evolving API security, the realities of integrating AI into your workflow, and tools that can help streamline the testing process. I selected these pieces for their practical advice on simplifying everyday development tasks while building more robust and resilient infrastructure.
Programming
Web Application & API Protection: An Overview (John Brawner) - I knew many security tools existed, and obviously I use some. But I learned a lot in this post. WAAP emerged because WAF alone was not enough to address APIs, bots, DDoS, and modern cloud traffic patterns in a single runtime protection model.
How to Turn a Postman Collection into a Maintainable pytest Suite (Mikhail Golikov) - Tests are important, so keeping them clean should be too. This post gives us a great example of how to build reliable tools to do exactly that.
OpenAPI Code Generation with Corvus: Typed HTTP Clients (Matthew Adams) - Who doesn't uses APIs?! I need to try that today!
AI
A new way to reflect on how you use Claude - This post shares a reporting tool to visualize our Claude utilization.
Better tools made Copilot code review worse. Here's how we actually improved it. (Napalys Klicius) - Interesting story that shares experiments to improve AI when doing code review. How it failed and how it work, and how the same fix didn't do great in a different context.
Miscellaneous
Your Laptop Is the New Production Environment (Karan Verma) - The title definitely caught my attention, and it's so true. First post of a promising series.
AI is ready. Your APIs probably aren't (Matt Gray) - Postman has always been an interesting tool. I've been using something else for a while but am thinking about exploring it again!
How GitHub gave every repository a durable owner - A nice behind-the-scenes story where GitHub shares the issues, failures, learning and success.