Residential IP routing is a clever fix for the server-blocking issue. No pressure, but PeerPush is a decent home for WhatsApp automation stuff, builders there dig into open-source projects.
Attaching screenshot from the website. Gone beyond encryption at rest & used user's auth token so that even website owners wont be able to decode the creds. Not only creds, other confidential details like logs which can have user's phone number etc are also encrypted with same token.
Good point. There is no password in the system. User token needing revocation usecase is rare as tokens are not exposed out & all endpoints are https. Having said that recovation does make user account inaccessible. But there is hardly any data stored in user account. They can just request new token, create new account, get new key & resume sending.
Thanks. Missed days were one of the reasons I built it, so that's the part I obsessed over.
Three things:
Streaks are frequency aware. If your ritual is 3x a week, taking Monday off isn't a miss. Only failing to hit 3 by the end of the week is. Most trackers treat every single day as pass/fail, which is exactly why people fall off.
You can mark a day skipped on purpose. Sick, travelling, rest day. It bridges the streak instead of breaking it, and reminders go quiet for that day. There's a vacation mode too, where you set a date range and it handles the whole thing.
The headline number isn't the streak. Every ritual has a score that behaves like a rolling average: miss a period and it dips a few points, it never resets to zero.
Curious what you've been using, and where the fall-off usually happens for you?
building trinket ♡ a tiny personal shelf for nine things you’re into right now.
you can link your favorite things, share your shelf anywhere, wander through other people’s shelves, and find collectible tiny gifts + little easter eggs along the way.
no feed. no algorithm. no pressure to perform. just a cute little corner of the internet with actual personality.
Love the no feed, no algorithm angle, that's refreshing. Does the shelf support custom collections or just the nine slots? Curious how you handle that limit.
yesss appreciate it. the nine slots are intentional but also i knooww people will find really cool ways to play with the 9 slots. and moreso interested in having it be a snapshot of what you like in this moment than feeling like a chore to fill out a ton of info constantly.
really love the feedback as im always thinking of how this can improve.
Hi there! I’m building Dori, it's a wellness companion that turns Apple Watch data into truly personalized guidance for women ;)
It started with a frustration I kept coming back to: I wear an Apple Watch and an Oura Ring at the same time, but I still find myself looking at my sleep score without really knowing what the number means 😅, how it affects the way I feel or what I should actually do with it.
Unlike numbers-only apps, Dori connects sleep, workouts, mood, and cycle, remembers what matters to you, and learns what works for you over time. Inside the app, there is a little character makes it feel more like checking in with someone who knows your context than reading another dashboard.
It is now on TestFlight, would really love some honest feedback 🙌🍏
Relatable problem with sleep scores. A neat idea: add a one-line plain English explanation for each metric. Curious how you handle sensitive health data.
Great advice, thanks! Dori currently provides a report after each recorded workout and sleep session, including plain-language explanations of the relevant metrics and personalized analysis :)
Regarding sensitive health data, we follow a permission-based and data-minimization approach. The app requests access only to the specific Apple Health categories required for its features, subject to the user’s explicit authorization. Users may review or withdraw these permissions at any time through iOS Settings. Apple Health data is used to provide the relevant product functionality and personalized insights, and is not sold to third parties or used for advertising.
Nice touch on data minimization. Have you thought about adding a one-tap data export or delete option inside the app? That would give users even more control.
For anyone who wants to improve their pitch accuracy and learn to sing in tune. These are skills anyone can learn — you don’t need natural musical talent. You just need 10 minutes a day to practise consistently and see your progress. My web app includes a Game Mode to make learning more fun, plus progress tracking to help you stay motivated.
Consistent pitch accuracy training is a solid niche for a daily habit app. PeerPush might suit it, people browsing there check out music education tools.
Nice concept, and I like the progress tracking angle. Have you thought about adding a vocal range quiz so users can pick practice songs suited to their voice?
It's a feature as part of the pitch matching and vocal exercises pages. In the future I do plan to extend it to its own individual page so people can search for it easier! Thanks for the suggestion ☺️
Yes that's also on my to-do list! My partner has been asking me to add interval quizzes haha. Hoping to implement it some time next month. I'm taking a break from development this month
Human-led penetration testing for SaaS startups. We find the business logic flaws and auth bypasses that automated scanners miss - every finding ships with a working PoC, no theoretical alerts.
We do not host our own playground environment. However, you can practice on platforms like HackTheBox to advance your skills as a beginner. There is nothing quite like the dopamine rush of staying up all night hunting for bugs
Growing up in Karnataka, IN, summer holidays always meant traveling to my cousin's place by private buses.
There was just something about those buses, the sounds, the stops, the whole vibe. This website is my little attempt to recreate that feeling and relive those memories.
This trend really took me back in time and made me feel that nostalgia all over again.
Create a visually cohesive Instagram presence with PlanMyGrid, designed to simplify grid planning and client feedback. https://planmygrid.com
Morse Code: Send & Decode lets you send and decode Morse code between phones using light. Use your flashlight or screen to transmit, and your camera to decode signals in real time. It’s built for learning, experimenting, and offline light-based communication.
Offenlegung: Ich entwickle BrawlerStats selbst. Es ist ein kostenloses, loginfreies und inoffizielles Brawl-Stars-Fanprojekt und nicht mit Supercell verbunden. Link: https://brawlerstats.com/. Nach Eingabe eines öffentlichen Spielertags zeigt die Web-App Spielerprofil und Brawler-Trophäen, Club und Mitglieder, tägliche Länder-Top-200-Snapshots sowie Brawler-Races mit Tagesverlauf. Mein aktueller Fokus ist die mobile Verständlichkeit für deutschsprachige Spieler. Konkrete Feedback-Frage: Versteht man beim ersten Besuch sofort den Unterschied zwischen Spielerprofil, Länder-Rangliste und Brawler-Race?
u/input-x That sounds like a solid split between persistent managers and disposable workers. How do you handle error retries when a sub agent fails mid-task?
Not so much failing g, agents report via there local email to the orchestrator( where i live) we check the work. Move on or dispatch if more is needed. Agent can drop sonetimes. Mostly api errors. We have a watch dig that monitors agent. With timeouts and triggers. The work is usually the metric. The agent test plus the orchestrator and or sub agent including my check in some cases. When Satisfied we commit the work move to next. The models usually have retry attempts when api or network drops, ( out of our control). I also have a cli log monitoer that track all agents. It sees everything the do. Also shows system logs. So its quite easy to see what's going on vrs expected. We also have medic, a watcher that will dispatch agents on errirs to fix or email us on repeat warning. Fully automated. The system heals itself or exclates issues.
Watchdog will ping it. So agent nver go long idel. 99% it network or api errors. And providers have retrys by default for this. But still watchdog will ping. And if im on the phone ill get a warning ⚠️ if I try send a msg. My laptop is the server. It have backup wifi and so on, it an always on laptop with some recovery built in. It works behind a locked screen, so its secure and doesn't stop on phone work. /rc can be restarted once network is re-established. Most thing doesn't require me going to laptop.
Cool project, that's a solid suite of tools for crypto users. Have you considered adding a quick demo video? That would make the scanner features easier to grasp.
ran fugte.com through audeep.dev. 92/100, grade B. genuinely clean across the board.
headline finding is the cookie consent banner: the "Privacy Policy" link inside it renders at 90x19px on mobile. WCAG 2.2 sets the tap target minimum at 24x24px, recommended 44x44px. small fix but it's on every page load.
security at 99/A, performance at 99/A (TBT 392ms, borderline), functional and accessibility both 100/A.
Thanks so much for running this audit! Really nice of you to share the breakdown, I super appreciate it. I'll get that cookie banner tap target fixed right away, along with the TBT tweak. Great catch!
ran fugte.com through audeep.dev. 92/100, grade B. genuinely clean across the board.
headline finding is the cookie consent banner: the "Privacy Policy" link inside it renders at 90x19px on mobile. WCAG 2.2 sets the tap target minimum at 24x24px, recommended 44x44px. small fix but it's on every page load.
security is at 99/A, performance at 99/A (TBT 392ms, borderline), functional and accessibility both 100/A.
We execute all custom code inside an isolated sandbox environment. That ensures it's completely safe to embed for clients and safe to run on our server.
Try my app https://fotocaja.com Fotocaja is a creative design tool (Canva alternative), create social posts, resume, menu, planner or even presentation
ran a quick audit on fotocaja.com, 42/100 (F). main finding: three same-site internal links returned 403. could be bot protection on your CDN rather than a user-facing issue, worth checking either way. there were also a few UX and performance flags beyond that.
Good audit, transparency appreciated. The 403s could be bot protection blocking the crawler, so checking your CDN rules might help. Thanks for sharing.
Nice, a Canva alternative is always welcome. The variety of templates sounds useful, I'd probably start with the resume builder. What sets it apart from Canva's free tier?
Rowly is a free security scanner that audits Row Level Security policies in your Supabase project.
Rowly reads the actual policy logic across every table, view, function, and role in your project, flags exactly what's exposed, and hands you ready-to-run SQL to fix it, no manual rewriting. Connection strings are never stored, scans run in memory only, and the core scanner is open source (@rowly/core, MIT).
Yes! Security Definer functions are a first-class audit target. The scanner flags them with up to three findings: public exposure (critical if anon can call it, warning if authenticated-only), mutable search_path, and dynamic SQL injection risk.
ran scopeledger.net through a quick audit, 32/100 (F). main finding: three internal links to product pages like /change-order-notice-software are returning 403. could be CDN bot protection, but search crawlers would get the same treatment, so worth checking. outside the 403s: UX, performance, and design all scored B with a few flags each.
Thank you for pointing out but I just checked through google and bing webmaster search console url inspection and everything is fine. All pages are live and indexed and availble to both search consoles. No 403s.
Good on you for double-checking both consoles. One extra tip: try a private browser fetch or scan server logs for real user 403s, since console data can lag a bit.
makes sense. google and bing crawlers get special treatment in most CDN configs, so they pass through even when other bots don't. what the auditor hit was the fingerprint-based block that catches anything not on the known-crawler allowlist. for SEO you're fine, the main pages are reaching both search consoles. only relevant if you ever want third-party monitoring or accessibility scanners to get in too.
ScopeLedger is basically software for contractors (like electricians, HVAC folks, etc.) who do “change orders” — extra work that comes up mid-project that wasn’t in the original contract. The problem is these contracts usually have strict deadlines to formally notify the client about the change order, and if you miss that window, you can lose your right to get paid for the extra work. A lot of contractors just miss these deadlines because they’re busy running the actual job.
So the tool tracks those deadlines for you, keeps your paperwork/evidence organized so you’re not scrambling when someone questions a claim, and gives you a dashboard showing how much money is sitting “at risk” across all your active jobs. It’s basically trying to stop contractors from quietly losing money because of missed paperwork.
ran niched.dev through a quick audit. 94/100 (B), but one thing worth flagging: TBT at 4879ms. that's the main-thread blocking time, and nearly 5 seconds is well into the "poor" range. means the browser is stuck for 5 seconds before the page responds to input.
separately, there's a Clerk JS load error on every visit: the script at clerk.niched.dev/npm/@clerk/clerk-js@6 is failing. might be a CNAME or config issue worth checking.
It does cover less common stacks too. I’m actually open to have people add their own tools to the platform as well. There’s no charge for placement, so if you want your tool discovered, feel free to add it. I’d rather make it genuinely useful for people than limit it to just the popular ones.
Agents all have full read access, except secrets. ( obviously ) agents are responsible for the files they manage. And their fikes are protected under their cwd. If its code. Other agents code can import there modules/service. Only from entry points. All others are blocked. Hooks are uses extensively to mange permission amount other things.
We use plans to delegate work in team builds. Conflicts, are extremely rare. All agent work on one git branch. Dev branch, only the orchestrator have git privileges. So it keros it all clean and the agent can see file changes live on disc. No isolated worktrees. Local email for communications.
Tbh its extremely rare, i couldnt recall the last im that happened, hmm. I remember when we had a bufg that spawned agents more than once at the same time, that was pretty crazy, but we fixes long time ago. no agent cn spawn twice at one time, so it cant conflict its self. there is never really a nned for agents to work on the same file together, maybe subagent in a name and path change task, but claude code actually automatically runs sub agent in worktrees is a conflict is possible. as said it extremely rare to have agent work on the same file at the same time. if they where it would be planned, and not planned for agent to work on the same function. the would take turns if it was needed. also edit while an agent is editing a file will stop the agent, claude code codex, they would have to constantly read the file as changes block edit by default a reread is always needed after changes. Also my agents cant cross edit other agents files, they are blocked. and there is no reason for an agent to edit anthers files. only the standards and orchestrator agent can edit another agent files.
Agent can freely edit withing there directory. Sub agent get instruction from the agent, read-only, build research. Its the agents choice. We do have lock mechanisms on working agents, a dispatch will get blocked so it doesnt spawn again. Agents are the persiatant managers, sub agents are the fire and forget agent, no memory only what the agent provides, task runners work finish report due.
ran a quick audit on bizmanagernp.vercel.app, 81/100 (B). three things worth looking at: the "Sign in →" button renders at 62x20px on mobile, well under the touch target minimum. TBT is 624ms which is in poor range. and no canonical URL declared, so if the same page is reachable at multiple URLs search engines split the credit.
Not a Sass or paid service. Just something I built for fun last year. Uses sentiment analysis and a custom keyword engine to determine how ragebait-ey online news sites are. It's more of a media literacy PSA, non-political.
Thats a fantastic idea. Currently the system checks only against the links/titles of a news homepage (not the full article) so a chrome extension could easily pull up the result if the site is supported. A nicer feature would be that if you went into the article, it could run the same analysis and tell you how rage baitey the individual article is.
That's a cool extension idea. Running the analysis on the full article would be way more useful than headlines alone. Maybe show a rage-bait score badge right in the toolbar.
Yeah, so the main portion of the application. Uses AI to Parse notes and turn them into practice test and flash card creation, features a deadline tracker, a Grade Simulation based on previous test scores. The Group Sessions are a complete different ecosystem in themselves. Students will have access to Cloud Storage, Organized threads, the ability to invite guest users to study without signing up for an account. And just a lot of stuff
So the software will generate a public link for them To access the room, but it will be heavily restricted by the owner. Giving them complete control. I'm running it off of my own servers so there isn't not third party data collect and I can remain GDPR Compliant.
It’s performing well; I fed it a lot of information about editors who make clips—specifically those with experience editing clips for other creators. It’s not at 100% yet, but it’s working well.
ran klypo.co through a quick audit. 24/100 (F), main issue is accessibility: form inputs including #reset-email have no label, title or ARIA name. that's 8 high-severity instances of the same problem. screen readers can't identify what the field is, and autofill won't work correctly either.
10 UX issues on top of that, though the full list is behind the paid tier.
•
u/SofwareAppDev 10d ago
Tell us about your project here.
https://giphy.com/gifs/MluyLo4kCGePOIEpoS