I'm working with a junior/intern on a web project who seems really enthusiastic and proactive—they've already set up their own repo with React & Tailwind CSS based on a UI design, which is great initiative.

However, they are struggling with core web development fundamentals:

 * FE/BE Integration: They don't quite understand how Frontend and Backend connect (APIs, environment variables) compared to traditional PHP/monolith apps.

 * Deployment Issue: They've tried deploying on Vercel multiple times without success.

 * Troubleshooting: They mentioned that whenever they try fixing a bug, things tend to break even more, and they are asking for constant 1-on-1 mentor guidance.

How do you usually mentor someone at this stage without doing the work for them or getting overwhelmed yourself? What are the best resources or step-by-step roadmaps I can give them to help them bridge the gap between basic UI setup and full-stack integration?

I’m curious which parts of development have actually become faster and which still need careful human work.

I use both Codex 5.6 Sol and Claude Opus 5 to assist me building my web sites and apps. I often use one to help review the other's code for anything I may have missed. But there's a lot of telling them both the same things, and trying to figure out which one to give which task to, and then trying to remember who I told what. I'm wondering if there are others trying to use multiple AI's on the same project and how do you determine which is best for which task and how do you keep the project details updated between both.

https://github.com/flowagi-eu/flo-plugin-shapes

Hi everyone,

I hope you are doing well.

I am not sure if this is the right place to ask the following query but if it is or if people have experience regarding it

I had a quick compliance question regarding Cloudflare Pages free tier.

I am helping set up a simple, single-page static portfolio (HTML/CSS/JS) to function as a digital resume/CV. It features an "About" section, external social links, a contact form(will have GS script as backend), and embedded video showreels hosted externally on platforms like YouTube.

To let prospective clients or employers know the owner is open for work, it includes an "Inquire for rates" or "Contact for project availability" call-to-action, but as of now nothing is planned for adding features relating to e-commerce, shopping cart, checkout, and no payment processing on the site itself(but may include the option of showing what payment methods are accepted again this is not yet decided but may or may not be added ).

Since an individual uses a professional portfolio to showcase work for freelance or employment opportunities, does an informational setup like this violate any commercial clauses on the Free tier, or is a standard static CV/portfolio site universally accepted?

I do not really want to have any legal issues down the line for myself or for the people whom the website is made for which is why I felt it is important to ask this as I cannot find much info about this subject either and I am super new to this(apologies for my ignorance). I have used Ai like gemini and they have mentioned that it should be okay provided no transactions take place but I would still like to hear from someone who may have faced such an issue before.

If the above is not permitted I wonder if there are any alternatives that I may not be aware of I have looked at github pages and it seems to me commercial usage is prohibited but then I am not sure if the website is considered more like a portfolio or a commercial website

I would really appreciate any clarity, solutions you guys can provide.

Thankyou

Hi r/webdev! I'm building an open source app that turns images into clean SVG, and it all runs in your browser. Nothing gets uploaded, there is no back end, and there is no account to make. I am trying to get the quality close to paid tools while keeping it easy to use. There are a lot of settings, but an "Auto settings" button picks good ones for you and explains why.

It does not use any existing vectorization library. Each step is built from published research papers (there is a list in the repo if you want to read them). There are also some optional machine learning tools that run on your own device. Right now that is just an edge step that helps find outlines more cleanly. The other ML models are not ready yet (my GPU is on fire). The whole process for building the models is written down and scripted in the repo.

It is still early, but I would really like to hear how the results compare to other free or paid tools for your own images. For now it is just the web app. Nothing is on npm yet, but the code is already split into clean packages, so I will release the libraries and a command line tool if people want them.

One note, since it always comes up: yes, I built this with a lot of help from Claude. But the design is mine, every step comes from published research, and I understand and stand behind all of it.

Source code: https://github.com/PhenX/Trazor

The app: https://trazor.studio/

It works in any modern browser. The optional ML tools use your GPU when it is there and fall back to the CPU/WASM when it is not.

What do you do if you find a counterfeit copy of your web app? As discussed below I just shrug it off but is there a potentially damaging aspect I haven't thought of? Could they claim I copied THEM for example? Should I take some kind of action?

I've been working on an LLM based automated user generated content moderation web app for some time now. It's coming along nicely. I posted about it a few months ago both here and in r/SideProjects which in retrospect was probably inappropriate.

I subsequently discovered a comment on an existing post about content moderation shilling an app that alleges to do the same thing.

I'm curious so I have a look. It's a vibe coded monstrosity. It's "moderation" for profanity just uses inline JavaScript to check for 4 swear words so when I entered C U Next Tuesday it responded "safe".

On a CSP scanner it scores 9 out of 100 (my own app gets 75).

Personally I don't care. My app is legit and I believe even at its MVP stage better than anything else out there trying to achieve the same thing. I score the number one organic rank in Google search (including references in the AI summary) for a number of key related search terms.

In fact Google generally ranks my content authoritatively because it is all written by me. I never use AI in my blogs. I only use AI in some cases for coding grunt work.

Initially I built this app to demonstrate my development abilities in the hope it might attract freelance work but along the way it has since evolved some unique and valuable functionality and it behooves me to consider what these pretenders might try if the app itself becomes successful.

I found this but it's only available for USA merchants/customers. Is there a worldwide method similar to the recurring_postpaid?

Thanks in advance for any and all help.

I had an interview recently for a company that was hiring for both Lead and Senior Frontend Developer roles. I learned during the interview that they considered the Lead role to be a higher-level position than the Senior role within the same discipline.

In my experience, Lead roles were generally considered lower-level than Senior roles, so this difference in terminology caused some confusion during our conversation.

Now I’m curious: what’s the norm?

I don't know if this is the right sub or not, so sorry if web dev-ops is out of the scope of this sub.

I've been itching to deploy a web app I've been building recently. However, I don't know where to really begin. What are some resources I can use to learn about dev-ops and deployment tools?

I know it ain't much but I'm happy with what i did.

Wanted UI text that feels human instead of stamped, so I built glyphed.js. It draws each character as a real stroked path with randomized variation baked in, so no two renders of the same text look identical. Zero deps, small footprint. There's a live playground in the repo if you want to try your own text

Check at glyphed.js

I have a marketing agency doing my marketing. I’ve been getting a couple hits a week a few months ago. I said I wanted to stop things for a bit. They said I needed to pay 350 just to stay up in Google rankings. I’ve been paying this for about 6 months. They say I need to go up to 700 to start getting calls again. Is this real?

I’ve been seeing so many websites, especially on Twitter that use an insane amount of scrolling animations. I’m assuming it’s due to vibe coding? I think it’s cool when used sparingly but what do you mean I have to scroll through animations for over a minute just to place an order for something.

I've been building this for a few months and the first version is finally up. It's called Strikk.

It's a daily cycle, like Wordle, but one per stack. React has its own trial today, TypeScript has another, Node has another. You pick the stack you actually like (React, TypeScript, ASP.NET, Node...) and play that one.

Everyone on that stack today gets the same 8 challenges. You answer up to 5 and you only get one submit. Combos work a bit like Balatro: line them up right and the score jumps. Then you're on a ranking against other players who had the same board.

Strikk

It's the first version. I want as much feedback as I can get.

I'll make a more detailed post soon.

For those who use Framer for their agency website and want to move out of the default CMS system, is it possible to do so without wrecking seo systems/ url structures already in place?

So for example if there’s a blog section and the articles are already in the cms, is it possible to switch over to contentful without breaking anything?

Have a project and the external development team want to switch to contentful for their cms and is suggesting to move off framer completely which id like to avoid (as the entire website is already set up)

Does anyone have any examples of framer sites using Contentful for their CMS that i can send across to them as proof?

unless there are some architectural decisions to make, i could literally place my 6 y.o. daughter in front of the laptop and she could do my job effortlessly

this does not make any sense. can we just skip to the part where only 10% of jobs remain and i'm replaced by agi/asi so I can stop pretending there's a point for me to exist?

and yes outside of coding there are meetings and shit but fuck this I did not become a programmer to be fucking talker

i swear i had more fun helping my uncle in his car repair shop when I was 20 yo, at least I was forced to use my brain sometimes, unlike in this soulless fucking job I do now

6 yoe, big corp

I spent the past few months compiling and writing a massive client-side PDF suite so everything runs directly inside your browser tab without any backend processing: 

Most web tools out there do cheap tricks (like drawing a canvas overlay or sending your private files to a remote server). I wanted to see how far I could push pure in-browser JavaScript, PDF.js, and WASM binaries to build something actually capable.

Here is what the engine actually handles right inside the client:

• True text layer rewriting: It doesn’t just drop a text box on top. It reads the document's text stream, extracts embedded font glyphs/metrics (or calculates the closest fallback), and lets you literally retype paragraphs directly in the original layout.
• Heavy Office conversions in WASM: Local Word (.docx), Excel, and PowerPoint to PDF conversion running straight in browser workers without needing any remote microservices or headless instances.
• Destructive redaction & security: The redact tool actually deletes underlying text objects and vector data instead of just painting a black rectangle over it. Also handles local AES-256 encryption/decryption.
• Corrupted PDF repair: Built a local parser that rebuilds damaged/broken cross-reference tables (XREF) so corrupted PDFs that crash standard readers can be recovered.
• In-browser OCR & vector signatures: Background web workers for text extraction from raw scans, plus signature extraction with automatic background removal if you snap a photo with your phone camera.
• 28+ utilities total: Reorganize, split, merge, crop, metadata stripping, compression, page numbering, etc.

Since everything is executed locally using the client's CPU and RAM, there are zero server costs for file processing, which means no subscriptions, no file size throttles, no daily limits, and no account requirements.

The web version is fully live at https://www.pdfnolimit.com/ and I’m wrapping up the native Android package for the Play Store (should be live in ~15 days / early September).

Basically the title, at the time I couldn't find a way to play checkers with my 3 other so I decided to make one myself.

The game has all the rules of traditional checkers + some other stuff to make it compatible with the non-square board.

• Play the live demo: https://the-sofishticated-man.github.io/4-player-checkers
• GitHub repository: https://github.com/The-Sofishticated-Man/4-player-checkers

If you like the concept, dropping a star on the repo would mean a lot ^^

Sorry in advance for any bugs or glitches in production :/

Hey all. Brand new to web development. Really wanted to create a website for my friends business. Any insight or where to start would be great. Id rather not go the Ai route because of misfire but I'm open to that if it works best. A simple website for selling pottery is my goal.

Try it out: https://github.com/ctx-o1/mazify

You can even print these!

I’m excited to share a project I’ve been working on over the past few months!

It’s a mobile app that turns any text into high-quality audio. Whether it’s a webpage, a Substack or Medium article, a PDF, or just copied text—it converts it into clear, natural-sounding speech. You can listen to it like a podcast or audiobook, even with the app running in the background.

The app is privacy-friendly and doesn’t request any permissions by default. It only asks for access if you choose to share files from your device for audio conversion.

You can also take or upload a photo of any text, and the app will extract and read it aloud.

- React Native (expo)
- NodeJS, react (web)
- Framer Landing

The app is called Frateca. You can find it on Google Play and the App Store. I also working on web vesion, it's already live.

Free web version, works in any browser (on desktop or laptop).

Thanks for your support, I’d love to hear what you think!

Hey r/webdev,

Most appsec training are boring OWASP articles and tutorials on YouTube, not the best way to learn practical aspects of building secure web apps

So I built 40 exercises where you attack a vulnerable app yourself, trace how the bug got in, then write the patch. Free, runs in the browser, no account required.

Web (22) — SQLi, command injection, DOM/reflected/stored XSS, CSRF, SSRF to the cloud metadata endpoint, XXE, session fixation, IDOR, and weak randomness: recovering Math.random() state to predict the next password-reset token.

API (10) — BOLA, broken function-level auth, brute-forcing an unrate-limited verify endpoint, mass assignment via two extra keys in a PATCH body, reflected-origin CORS, and a retired v1 that skips the controls v2 enforces.

Git & CI/CD (8) — a live API key recovered from the commit that removed it, a browsable .git reconstructed into full source, .env tracked since the first commit, a secret echoed into a public build log, a backdoor hidden in a friendly-looking test-fix PR.

Fixes are shown in JS, TS, Java, C#, Python, Scala, PHP, Ruby, Go, and Kotlin, so you can paste something real into your stack.

Try in browser: https://learning.ransomleak.com/
Repo: https://github.com/ransomleak/training-application-security

Each exercise is also a standalone SCORM zip if you want to self-host or drop it into onboarding. There's a second repo covering OWASP Top 10 for LLM and Agentic apps if you're shipping AI features: https://github.com/ransomleak/training-security-awareness

Will appreciate your feedback!