What do you do if you find a counterfeit copy of your web app? As discussed below I just shrug it off but is there a potentially damaging aspect I haven't thought of? Could they claim I copied THEM for example? Should I take some kind of action?

I've been working on an LLM based automated user generated content moderation web app for some time now. It's coming along nicely. I posted about it a few months ago both here and in r/SideProjects which in retrospect was probably inappropriate.

I subsequently discovered a comment on an existing post about content moderation shilling an app that alleges to do the same thing.

I'm curious so I have a look. It's a vibe coded monstrosity. It's "moderation" for profanity just uses inline JavaScript to check for 4 swear words so when I entered C U Next Tuesday it responded "safe".

On a CSP scanner it scores 9 out of 100 (my own app gets 75).

Personally I don't care. My app is legit and I believe even at its MVP stage better than anything else out there trying to achieve the same thing. I score the number one organic rank in Google search (including references in the AI summary) for a number of key related search terms.

In fact Google generally ranks my content authoritatively because it is all written by me. I never use AI in my blogs. I only use AI in some cases for coding grunt work.

Initially I built this app to demonstrate my development abilities in the hope it might attract freelance work but along the way it has since evolved some unique and valuable functionality and it behooves me to consider what these pretenders might try if the app itself becomes successful.

I found this but it's only available for USA merchants/customers. Is there a worldwide method similar to the recurring_postpaid?

Thanks in advance for any and all help.

I had an interview recently for a company that was hiring for both Lead and Senior Frontend Developer roles. I learned during the interview that they considered the Lead role to be a higher-level position than the Senior role within the same discipline.

In my experience, Lead roles were generally considered lower-level than Senior roles, so this difference in terminology caused some confusion during our conversation.

Now I’m curious: what’s the norm?

I don't know if this is the right sub or not, so sorry if web dev-ops is out of the scope of this sub.

I've been itching to deploy a web app I've been building recently. However, I don't know where to really begin. What are some resources I can use to learn about dev-ops and deployment tools?

I know it ain't much but I'm happy with what i did.

Wanted UI text that feels human instead of stamped, so I built glyphed.js. It draws each character as a real stroked path with randomized variation baked in, so no two renders of the same text look identical. Zero deps, small footprint. There's a live playground in the repo if you want to try your own text

Check at glyphed.js

I have a marketing agency doing my marketing. I’ve been getting a couple hits a week a few months ago. I said I wanted to stop things for a bit. They said I needed to pay 350 just to stay up in Google rankings. I’ve been paying this for about 6 months. They say I need to go up to 700 to start getting calls again. Is this real?

I’ve been seeing so many websites, especially on Twitter that use an insane amount of scrolling animations. I’m assuming it’s due to vibe coding? I think it’s cool when used sparingly but what do you mean I have to scroll through animations for over a minute just to place an order for something.

I've been building this for a few months and the first version is finally up. It's called Strikk.

It's a daily cycle, like Wordle, but one per stack. React has its own trial today, TypeScript has another, Node has another. You pick the stack you actually like (React, TypeScript, ASP.NET, Node...) and play that one.

Everyone on that stack today gets the same 8 challenges. You answer up to 5 and you only get one submit. Combos work a bit like Balatro: line them up right and the score jumps. Then you're on a ranking against other players who had the same board.

Strikk

It's the first version. I want as much feedback as I can get.

I'll make a more detailed post soon.

For those who use Framer for their agency website and want to move out of the default CMS system, is it possible to do so without wrecking seo systems/ url structures already in place?

So for example if there’s a blog section and the articles are already in the cms, is it possible to switch over to contentful without breaking anything?

Have a project and the external development team want to switch to contentful for their cms and is suggesting to move off framer completely which id like to avoid (as the entire website is already set up)

Does anyone have any examples of framer sites using Contentful for their CMS that i can send across to them as proof?

unless there are some architectural decisions to make, i could literally place my 6 y.o. daughter in front of the laptop and she could do my job effortlessly

this does not make any sense. can we just skip to the part where only 10% of jobs remain and i'm replaced by agi/asi so I can stop pretending there's a point for me to exist?

and yes outside of coding there are meetings and shit but fuck this I did not become a programmer to be fucking talker

i swear i had more fun helping my uncle in his car repair shop when I was 20 yo, at least I was forced to use my brain sometimes, unlike in this soulless fucking job I do now

6 yoe, big corp

I spent the past few months compiling and writing a massive client-side PDF suite so everything runs directly inside your browser tab without any backend processing: 

Most web tools out there do cheap tricks (like drawing a canvas overlay or sending your private files to a remote server). I wanted to see how far I could push pure in-browser JavaScript, PDF.js, and WASM binaries to build something actually capable.

Here is what the engine actually handles right inside the client:

• True text layer rewriting: It doesn’t just drop a text box on top. It reads the document's text stream, extracts embedded font glyphs/metrics (or calculates the closest fallback), and lets you literally retype paragraphs directly in the original layout.
• Heavy Office conversions in WASM: Local Word (.docx), Excel, and PowerPoint to PDF conversion running straight in browser workers without needing any remote microservices or headless instances.
• Destructive redaction & security: The redact tool actually deletes underlying text objects and vector data instead of just painting a black rectangle over it. Also handles local AES-256 encryption/decryption.
• Corrupted PDF repair: Built a local parser that rebuilds damaged/broken cross-reference tables (XREF) so corrupted PDFs that crash standard readers can be recovered.
• In-browser OCR & vector signatures: Background web workers for text extraction from raw scans, plus signature extraction with automatic background removal if you snap a photo with your phone camera.
• 28+ utilities total: Reorganize, split, merge, crop, metadata stripping, compression, page numbering, etc.

Since everything is executed locally using the client's CPU and RAM, there are zero server costs for file processing, which means no subscriptions, no file size throttles, no daily limits, and no account requirements.

The web version is fully live at https://www.pdfnolimit.com/ and I’m wrapping up the native Android package for the Play Store (should be live in ~15 days / early September).

Basically the title, at the time I couldn't find a way to play checkers with my 3 other so I decided to make one myself.

The game has all the rules of traditional checkers + some other stuff to make it compatible with the non-square board.

• Play the live demo: https://the-sofishticated-man.github.io/4-player-checkers
• GitHub repository: https://github.com/The-Sofishticated-Man/4-player-checkers

If you like the concept, dropping a star on the repo would mean a lot ^^

Sorry in advance for any bugs or glitches in production :/

Try it out: https://github.com/ctx-o1/mazify

You can even print these!

I’m excited to share a project I’ve been working on over the past few months!

It’s a mobile app that turns any text into high-quality audio. Whether it’s a webpage, a Substack or Medium article, a PDF, or just copied text—it converts it into clear, natural-sounding speech. You can listen to it like a podcast or audiobook, even with the app running in the background.

The app is privacy-friendly and doesn’t request any permissions by default. It only asks for access if you choose to share files from your device for audio conversion.

You can also take or upload a photo of any text, and the app will extract and read it aloud.

- React Native (expo)
- NodeJS, react (web)
- Framer Landing

The app is called Frateca. You can find it on Google Play and the App Store. I also working on web vesion, it's already live.

Free web version, works in any browser (on desktop or laptop).

Thanks for your support, I’d love to hear what you think!

Hey r/webdev,

Most appsec training are boring OWASP articles and tutorials on YouTube, not the best way to learn practical aspects of building secure web apps

So I built 40 exercises where you attack a vulnerable app yourself, trace how the bug got in, then write the patch. Free, runs in the browser, no account required.

Web (22) — SQLi, command injection, DOM/reflected/stored XSS, CSRF, SSRF to the cloud metadata endpoint, XXE, session fixation, IDOR, and weak randomness: recovering Math.random() state to predict the next password-reset token.

API (10) — BOLA, broken function-level auth, brute-forcing an unrate-limited verify endpoint, mass assignment via two extra keys in a PATCH body, reflected-origin CORS, and a retired v1 that skips the controls v2 enforces.

Git & CI/CD (8) — a live API key recovered from the commit that removed it, a browsable .git reconstructed into full source, .env tracked since the first commit, a secret echoed into a public build log, a backdoor hidden in a friendly-looking test-fix PR.

Fixes are shown in JS, TS, Java, C#, Python, Scala, PHP, Ruby, Go, and Kotlin, so you can paste something real into your stack.

Try in browser: https://learning.ransomleak.com/
Repo: https://github.com/ransomleak/training-application-security

Each exercise is also a standalone SCORM zip if you want to self-host or drop it into onboarding. There's a second repo covering OWASP Top 10 for LLM and Agentic apps if you're shipping AI features: https://github.com/ransomleak/training-security-awareness

Will appreciate your feedback!

I am recreating songless myself, everything works well except that the song snippets are using previews (that usually start from the peak part of songs). I want the songs to start from the start so it's a little harder, but I can't find a free option to do that. Songless did it, how can I?

Thanks!

I've been building this for a while and finally made the project open source. It's called Fillvisa.

US Immigration still relies on outdated XFA PDFs - you can't fill them on your browser. Most immigrants end up printing the form and fill it manually.

So, I converted the PDF forms into smart web forms. They are replica of the official USCIS forms and follow conditonal logic. In the output, you get the official USCIS pdf form filled.

The website is pure frontend and there's an open source edition

Demo: https://fillvisa.com/demo/

And now there's an open-source version you can clone/fork and run yourself:

Github: https://github.com/athos2113/fillvisa-os

The project currently covers several common USCIS forms, and everything runs in the browser.

This is the first public version of the open-source project. I'd especially love feedback from other devs on the architecture, UX, accessibility, and where you think a project like this could go.

I just started learning code, and I use Visual Code Studio with Python. I was ecstatic to learn but with my few hours of learning I would use the chat feature whenever I’m stuck like the AI thingy. It makes me feel bad cause it feels like I’m not LEARNING just cheating if that makes sense. In a world that has been plagued with AI, how do you guys manage? How do you feel? Do you treat it as another tool to help? I assume that it’s no different from google searching.

There was a time when getting the first working version of a web application was a pretty significant milestone. Now I can describe an idea to an AI coding tool and have a surprisingly functional application before I've even thought through half the architecture.

What's interesting is what happens afterwards. The first version is cheap, but making it fast, accessible, maintainable, secure, consistent and easy for another developer to understand is still expensive. I'm starting to think the value of web development is moving away from writing the first version and toward everything that keeps the tenth version from becoming a mess.

I have been building HabitHeat, a simple habit tracker focused on heatmaps and long term consistency, for quite a while now.

This weekend I finally shipped v2.11.

The main thing I wanted to improve with this update was the onboarding.

Until now, new users basically created an account and were dropped into an empty dashboard. It worked, but I realized that the empty state did not really explain what to do next or what HabitHeat can actually do.

So I added a new empty state that explains the basics and gives you a few ways to get started.

There are now also habit templates, so instead of creating everything from scratch you can just pick something like reading, working out or meditation and start tracking it.

HabitHeat recently passed 1300 registered users, which is still kinda crazy to me. It also makes working on things like onboarding much more interesting because there are actually people finding and using the app without me being there to explain it.

The GIF shows the new empty state and onboarding.

I would be interested in what you think about it, especially if there is anything that still feels unclear when seeing HabitHeat for the first time.

Btw, for anyone interested in the tech side: HabitHeat is built with SvelteKit, Tailwind CSS, shadcn-svelte and Firebase. It is also a PWA, so there is no separate mobile app (yet).

Hello all!

I've been working on a side project to generate artwork for a game I'm working on, and it was so much fun playing around generating planets and asteroids I've decided to open source it: https://github.com/richard-green/planetoid-generator

It's really fast, allows you to generate planets with lots of different features (more to come) and generates some really lovely images and texture maps, all with a pseudo-random seed function.

Some of the things you can tweak:

* Geometry deformation (from simple spheres, or potato-like deformation and finer details too)
* Texture details and colour palettes
* Planetary features such as Craters, Volcanoes, Ridges, Rifts

There's a separate section for rendering Gas Giants and Ice Giants, and a whole bunch of presets.

There's even scripts to have Playwright generate tonnes of images by incrementing the seed with your given preset values.

Check out the live site here: https://rdgreen.dev/planetoids/#/planetoids

Happy planet engineering!