← Latest programming roundup All past issues

programmingSunday, June 21, 2026

Slopware, CORS, and AI agent tooling

A debate over AI-generated code quality is simmering: slopware warnings, ethical alternatives, and the cognitive cost of review. Meanwhile, practical tooling news, from GitHub Copilot metrics to a 403 bypass technique, keeps the day grounded in real engineering concerns.

Sources

The slopware debate

Several pieces today question the quality and ethics of AI-generated code, with a shared worry that speed is replacing craftsmanship.

#01hendrik-erz.deJun 21

The Rise of Slopware

Coins 'slopware' as the term for low-quality AI-generated apps, arguing that AI can't replicate maintenance or UX design, a direct challenge to the 'vibe coding' trend.

19 min readRead original

#02codeberg.orgJun 21

open-slopware

A curated list of AI-free open-source alternatives to AI-integrated tools, with an ethical stance against AI usage. Practical for developers who want to avoid LLM dependencies.

105 min readRead original

#03vinibrasil.comJun 21

When I reject AI code even if it works

Argues that AI-generated code shifts the bottleneck from writing to reviewing, creating a cognitive overload that can negate productivity gains. A nuanced counterpoint to the AI boosterism.

#04github.comJun 21

GitHub - mattpocock/skills: Skills for Real Engineers. Straight from my .claude directory.

Matt Pocock's personal collection of composable agent skills for AI-assisted engineering, positioned as a lightweight alternative to heavy frameworks like GSD. Emphasizes developer control.

Tooling and security

Practical updates and vulnerabilities round out the day, from GitHub's new Copilot billing data to a clever 403 bypass.

#05github.blogJun 21

AI credits consumed per user now in the Copilot usage metrics API

GitHub added an `ai_credits_used` field to the Copilot usage metrics API, letting orgs track per-user consumption. Useful for cost attribution and governance.

#06undercodetesting.comJun 21

The 403 Forbidden Bypass That's Making Hackers Rich: Base64 Encoding Trick Exposed + Video - Undercode

A publicly disclosed technique to bypass 403 Forbidden errors by Base64-encoding file paths. Relevant for pentesters and bug bounty hunters, but also a reminder to secure WAF rules.

#07fosterelli.coJun 21

Developers don't understand CORS

Calls out a widespread misunderstanding of CORS among developers, citing the recent Zoom vulnerability as a real-world consequence. A good refresher for frontend and backend devs.

Also today8

huihui-ai/Huihui-gemma-4-12B-coder-fable5-composer2.5-v1-abliterated · Hugging Facehuggingface.co
This article presents an uncensored, abliterated version of the gemma-4-12B-coder-fable5-composer2.5-v1 language model on Hugging Face. The model has had its safety filtering and refusal mechanisms significantly reduced through a technique called "abliteration," which removes ref
Here's What You Should Know About AI Agent Scopes And Tool Lifecycleshackernoon.com
The article appears to be about AI agent scopes and tool lifecycles in the context of building production-grade AI agents. However, the actual content provided is minimal (only an audio element fallback message and a subtitle), making substantive analysis difficult. The core prem

Browse the programming archive →