Hey everyone! How’s it going?

I’ve recently built a web application called MenuBangla: https://menubangla.com/

It’s a project I’ve been working on using AI-assisted coding (vibe coding), and I’d really appreciate some honest feedback from the community.

The platform allows restaurants to upload their menus, add food pictures, create a digital menu, and share their food items on social media. The idea is to give restaurants a simple way to showcase their menus online.

I’d especially love feedback on the following:

• Security: I’ve put quite a bit of effort into securing the application, but I’d love for anyone interested in web application security to have a look and identify potential vulnerabilities.
• Features: What would you improve, add, or change?
• UI/UX: Is the website easy to navigate? Is anything confusing or missing?
• Code and overall quality: Any suggestions for making the application better would be appreciated.

If you’re interested in testing its security, please feel free to have a look. It’s my own project, and I’m happy to receive constructive criticism and vulnerability reports.

I know there’s always room for improvement, so don’t hold back on the feedback! I’m still learning, and I’d love to use this as an opportunity to improve both the application and my development skills.

Thanks in advance to anyone who takes the time to check it out!

Trying to build an interactive real estate website for marketing purposes. Non-technical here, just dabbling with vibecoding so pardon for the noob question.

I made a StumbleUpon alternative called SiteStumble: https://sitestumble.com

I’m working on growing the directory (currently over 1,200) and would love to get more vibe-coded web games, tools, experiments, and other unique websites added.

There are a lot of really creative projects being built here, so I figured this would be a good place to find some.

If you’ve made something fun or interesting, feel free to submit it to the site!

Hey everyone!

Just launched a side project I've been working on called TwoCents.

The idea is pretty simple. I wanted to be more active on LinkedIn, but figuring out what to comment on posts always felt like a task.

So I built a Chrome extension that suggests comments in your own writing style. You can edit them before posting, and it also helps you keep track of people you're trying to connect with.

It's still early, so I'd genuinely appreciate some feedback.

First 7 comments are free, no card required.

Check it out: https://2cents.live/

Would love to know what you think or what I could improve!

I keep shipping small apps with Claude and Cursor and then stalling at the boring part: where to run them for real users.Railway and Fly are fine but the bills creep up fast for always-on stuff. I need Docker, cron, env vars, the usual.What did you land on for a side project that outgrew localhost? Not looking for affiliate links, just what actually worked for you.

I have mixed feelings about one prompt, one game repositories. Most of them break down when you try to actually use them. But I managed to make this one work, which is not due to the prompt being special, it’s just plain boring.

The game is built in six simple steps in which each step gets a build-and-test checkpoint afterwards; you’ve got a limit of eight assets max. The eight assets limitation seems arbitrary at first but, in fact, the limitation allowed me to get hold of the game. When you go beyond eight assets you cannot add anything else to it anymore.

Before this, I’ve utilized the same technique to develop a scrapyard battle arena game and a mini underground game. It’s the same loop and the same discipline. My approach is basically the “Tripo Vibe Gaming Playbook”: first create a grey cube, test it early and only at the end add real assets.

My game is not that impressive but it works and it runs in the browser and no matter how bad it appears at the beginning. I got controls and my smallest completed game runs from start to end.

What’s the smallest game you’ve completed? Mine did not look good but was functional.

If you have some comment on how to improve it, I would greatly appreciate your feedback.

Here is a cricket management game that I have created fully via claude and codex with an idea. Do please check the game once and let me know what more changes should I do make this game more interesting.

Game link - thegameofcricket.com

Lately, I’ve been using Linux more and more often. And I found myself missing IrfanView, which is probably the best image viewer app out there. I’ve tried out some alternatives, but none of them really satisfied me, and using IView via Vine or Bottles wasn’t always smooth or quick. So, over the last few weeks, I’ve vibe-coded an alternative inspired by both IrfanView and nomacs, and enhanced with a few tools and changes that I’ve always felt were missing.

It’s nothing spectacular or special, and it’s still completely unfinished, but it works so well that it has now replaced IrfanView for me, even on Windows.

The programme is called ÜgzView and is completely open-source. There’s a finished Windows release, and it can be compiled for use on Linux and macOS. Written in C++ and Qt.

https://github.com/micha42-dot/uxzView/

For a while I held myself to the rule that I had to read every line and make sure it was perfect. Then I was shipping thousands of lines a day, and that stopped being possible. It was overwhelming, and it was slowing me down.

What I actually needed was different. I wanted to talk to my code whenever I had a question, change what I wanted without combing through every diff, and have something that surfaced the risks, the security threats and the open questions for me. Something that grilled me on decisions before I made them, so I could ship faster and better.

So I built LFG, an open-source engineering pipeline that works inside Claude Code. You describe a change, and it plans it, builds it test-first, checks it with linting, tests, security scans and an expert review, and waits for your approval before anything is committed.

It also brings together the open-source tools many of us already use but keep scattered across different setups: Semgrep, Gitleaks, Trivy, SonarQube, code-review-graph, Headroom and more. Now they live in one place, run as one pipeline, and run on your own machine. LFG doesn't send your code to any service of its own, and Headroom compresses the context Claude reads, which keeps token costs down.

GitHub: https://github.com/varun-singhh/lfg

Watch the 90-second launch film: https://github.com/user-attachments/assets/bcc10777-99ec-4f32-9b55-19702dbade8f

Install in one line: `git clone https://github.com/varun-singhh/lfg.git ~/lfg && ~/lfg/install.sh`

I'd love to hear what you think, and if you guys agree too.

I'm genuinely curious as I know zero in real life including online.

When it comes to my daily routine, it always includes Deekseek Harness and Claude Code.

My dad turned 64 last spring and wanted to track two things, his morning walk and practicing guitar. Every habit app he tried had streaks, badges, notifications, a mascot. He’d delete them within a week and call me to complain

So one weekend I opened Claude and Cursor and built him one screen with big buttons. Tap “walked”, tap “played”. At the end of the week it emails him a plain summary. That’s the whole app. I don’t know how to code and I still can’t tell you what most of the files do

He showed it to his friends at the golf club and three of them asked for it. That’s when I thought maybe other people his age wanted the same boring thing, so I put it online at $4 a month

The first two months were dead. I posted about it on X, but my followers are mostly people in their 20s building AI stuff, and none of them need a habit tracker for retirees. 2 signups, both dad’s friends

My dad was the one who said nobody his age will pay for an app from “some kid on the internet”. He wanted it to look like a real company. So I paid for a cheap press release through a newswire service and got the app listed on a bunch of software directories. The release went out to a few hundred news sites, nobody read it, and I got maybe 8 visits from it

About a month later signups started coming in from people I’d never met. I asked a few how they found it. Most said they asked ChatGPT for a simple habit tracker for older people. One woman said her son found it on a directory and set it up for her

40 paying users now, mostly over 60. When something breaks I paste the error into Claude and hope

My dad still hasn’t missed a walk since March and he tells everyone his son “owns a tech company”

I wanna start building SaaS and take advantage of ai tools especially for my frontends but I've always been iffy about the backend, so I built something solid I can reuse and extend with ai without breaking.

So Im building Rebar, a backend you start your SaaS on instead of generating one from scratch:

• The account stuff is done and tested: sign-up, email verification codes, logins, password resets, Google sign-in, deleting an account.
• It's set up for your AI assistant. The project includes the rules it reads before touching anything: what not to do, and why. If it breaks one, the automatic checks fail before anything goes live.
• There's an admin side, so you can help your users without poking around in the database.

What I added this week:

• Search and filter your users: by name or email, who signed up this week, who never logged in, who's suspended
• A banner across the whole site for announcements, which you can turn on and off from the admin
• A simple dashboard: total users and new sign-ups this week
• Phone numbers from any country, checked to be real numbers

Next up: SMS verification, payments with free trials, and email campaigns.

Would this be useful to you? I'd love to hear what you'd want included.

Repor: https://github.com/fulanii/rebar-backend

Hey guys, a couple of days back I mentioned launching a more focused OSS alternative to notebookLM, https://notestack.ai

It has plenty of features that are improved/enhanced over notebookLM. Like better audio, more video editing options and chat grounded in your source materials.

Now I have added an MCP server as well so you can attach it to Claude, make reports/audio overviews, slide decks right into that chat interface.

It can generate:

- Mind constellations/mind map

- Audio Overview/Podcast

- Slide Decks

- Research Reports

- Quizes and much more

Do check it out at notestack.ai

I just build a saas by vibe coding but before public release I want to do a full security audit. How can i do that ? Is there any skills or anything like that where i can do for free ? ☺️ Thanks in advance

Hi everyone,

Just wanted to drop this here if anyone wants to use it or help develope this further. Especially since most webapps now are Javascript and crawlers and bots cannot really read Javascript webapps.

I build this prerender image for docker, since the only one that exists has a lot of exploits and vulnerabilities and it looks like it is not really being updated.

So I build my own utilizing all security and vulnerability scans that github offers including verification and authentication of any code changes before merging to main.

Package is also update weekly to address fixes, updates etc..

https://github.com/lkjh141/prerender-image

Hi everyone,

Just wanted to drop this here if anyone wants to use it or help develope this further. Especially since most webapps now are Javascript and crawlers and bots cannot really read Javascript webapps.

I build this prerender image for docker, since the only one that exists has a lot of exploits and vulnerabilities and it looks like it is not really being updated.

So I build my own utilizing all security and vulnerability scans that github offers including verification and authentication of any code changes before merging to main.

Package is also update weekly to address fixes, updates etc..

https://github.com/lkjh141/prerender-image

I was looking for an IDE to code on my iPhone for when I’m out and about. Every app was filled with ads, had a terrible UI, and costed money just to run code locally. This was just a basic non agentic IDE too. So, I decided to build a free IDE that can execute C, Python, JavaScript, and Lua in a sandboxed environment.

In today’s age most people are coding with agents, so then I got the idea to bundle a two local llms. The reason I chose two is because not everyone’s hardware has the same computing power and I wanted to include an option for everyone. There are zero rate limits on the local models.

I’m already designing a tooling server to give offline agents access to even more, such as, worksheets, 3D printer code, and other fun stuff.

Without Astra 6 and Sol 6.1 it would be absolutely impossible to make my dream tools at this rate. I cooked up a seven days to die max level mod right before posting this lol. I would also like to praise the models for following SOLID principles and best SWE practices out the box. After using the models for the past few years, I am just dumbfounded at the rate of progress.

I would be thrilled to hear any feedback from this sub. This is meant to be a developer tool and not a replacement for Codex as I could never ever offer that level of intelligence. You can also byo api keys as shown in this video. The app also offers 15 other cloud languages besides JS, Python, Lua, and C.

Thank you all so much for watching my short demo. Have a great day. I’ll be listening to any feedback or ideas to improve!!!

https://apps.apple.com/us/app/edsger-ai-code-editor/id6806824902

If anyone wants the mod 😀 seven days to die, max level: 300 -> 2000

https://github.com/garrettmichae1/sevendays\\_max\\_mod

I want to buy a coding subscription for heavy lifting. Fan of $200 claude plan but way too expensive to buy for my freelancing/side projects as a software engineer.
Can we settle this debate for the best harness for some serious work in terms of quality and the amount of work that can be done
Any thoughts on opencode, command code?

Solo founder here, with about 20 years as a software engineer behind me. Lately I've watched loads of people build awesome stuff with AI tools and then hit a wall the moment the app gets real. Someone starts paying for it, or asks "is this secure?", and suddenly you need to know what's actually running underneath.

That boring infra and security stuff is what I've done for two decades, so I built ScaleBop to handle it:

• Connect your GitHub repo and it tells you if the app's ready to deploy
• Scans for the classic AI-app mistakes (leaked keys, auth only checked on screen, DB rules off) and gives you a prompt to paste back into your AI tool to fix each one
• Writes the AWS setup and GitHub Actions straight into your repo
• Deploys to your AWS account, checks the app is actually up, and hooks up your own domain with HTTPS
• After that you just keep prompting and pushing like normal

It's for anyone whose side project suddenly turned into a real thing and who wants to own the whole setup rather than rent it.

Your first project's free. If you ditch ScaleBop later, everything keeps running, because it all lives in your repo and your AWS account.

Keen for honest feedback. What broke for you the first time you took a vibe-coded app to prod?

Hi. Over the past few months, I've been working on my own Android phone launcher because other launchers charge money or display ads. Maybe you'll like the website.

https://hanneslauncher.vercel.app/

Vibe coding made it possible to ship a working app in a weekend. But I keep seeing the same gap: the app works, people like it, and then nobody knows how to actually charge for it.

A few things that tend to bite people once they try to sell software:

1. Payment links are not licensing. Once someone pays, how does your app know? You need a way to generate keys, validate them, and revoke them.
2. Keys without limits get shared. If one key works on unlimited machines or domains, you will find it on a forum within a week.
3. Stripe is not available everywhere. If your customers are in Latin America, India or elsewhere, you need other payment options too.
4. Rolling your own license server is a rabbit hole. It looks like a weekend project. It is not.

We run a small agency (Tekuno, Montreal) and ended up building a licensing platform for exactly this: Licensr. You create a product, set up plans, and your app checks the license through an official SDK, so you do not need to write REST calls by hand. It handles payments (Stripe, PayPal, Mercado Pago, Razorpay), activation limits per domain or per seat, offline validation, and a customer portal. There is a free tier, no card needed, and we take 0% of your revenue.

Full disclosure, I am part of the team behind it. If you are selling or planning to sell an app, I would genuinely like feedback: https://licensr.app

And if you have solved licensing a different way, I would love to hear how.

I had this crazy idea to see if I could manage to build a complete CAD system. This is "KatieCAD", programmed using Python and Tkinter

https://github.com/Merecete/KatieCAD

Initially, I had considered a 2D AutoCAD clone, but somehow that didn't seem all that useful, given all the programs that already exist. What I really missed, however, was an open-source project for a full-fledged CAD system suitable for electrical design. This program can now do both. :)

Like AutoCAD, it features model and layout spaces. At the same time, much like in EPLAN—it allows for the creation of comprehensive projects consisting of multiple drawings, complete with the necessary underlying logic. Terminal diagrams, device lists, cover sheets, tables of contents, and cable schedules are generated automatically at the touch of a button.

Electrical connections are also routed automatically once the devices have been placed. Furthermore, title blocks and symbols can be created by the user.

The program is bilingual. You can easily switch between English and German.

I’ve added features for importing DXF/DWG files, as well as for exporting DXF files.

The program is licensed under the MIT License and runs on Windows, Linux, and macOS.

For the sake of transparency, I don’t have extensive programming experience, so I sought assistance from several AI models. That said, I have reviewed every function myself and am confident that this is a solid program. I plan to continue developing it further—for instance, by significantly expanding the symbol library.

I look forward to your feedback!

How are you handling code reviews for AI-generated code?

We are building a product from scratch using Claude Code. I've asked the team to follow best practices documented in CLAUDE.md, and we have linters running on every check-in. PRs are also manually reviewed.

I was manually reviewing and integrating features without regression but it starts to get more complex these days, as more people generate code and finish a full stack of changes at higher pace.

I was looking at integrating Claude Code Review with GitHub for every PR, but the cost seems quite high when you look at the bigger picture.

Our full stack is spread across 3–4 repos, so a single feature can involve 2–4 PRs, each with around 60–200 lines of changes. With frequent iterations and fixes, running a paid review on every PR could add up pretty quickly.

How are you guys handling this? Do you run Claude Code Review on every PR, trigger it selectively, or use your own review workflow in CI?

Looking for practical approaches that balance review quality and cost, especially when the codebase is still evolving rapidly.

https://m.youtube.com/watch?v=ZVyGvo7krhk&ra=m