Tech watch

Laura Kalbag has made Accessibility for Everyone free to read on the web. First published by A Book Apart in 2017, the book is now available to the web community as a resource for learning about accessibility.

Kalbag notes that accessibility best practices have changed little, while some recommended tools and job titles may be outdated; the Web Content Accessibility Guidelines are also approaching version 3.

Modern Web Guidance gives coding agents expert guidance on browser APIs, CSS, performance, and accessibility, steering them toward native solutions instead of legacy patterns. The repository brings together 232 features and 186 use cases as skills installable in multiple agents.

Its CLI searches locally for a guide and adds it to the agent’s context. The guidance incorporates Baseline compatibility data, targeted fallbacks, and automated evaluation; the project is marked as a preview release.

emoji-picker-react provides an emoji picker for React, either with its built-in styling or adapted to a product’s visual design. The interactive playground lets developers try props, CSS themes, and customization examples.

Features include search, skin tones, custom emojis, and multiple languages. Its reactions mode starts with a compact set of popular reactions, then opens access to the full emoji library.

OpenTUI lets developers build terminal user interfaces in TypeScript, directly or with React and Solid. Its native renderer is written in Zig, and layouts use flexbox.

The library supports selects, inputs, and scroll boxes controlled by keyboard or mouse. It can also display images, play sounds, and render 3D graphics.

Puck, a visual page editor for React, adds field groups and tabs in version 0.24, along with a checkbox field for selecting multiple options. Drag handles also make it easier to reorder components in nested layouts.

The renderFields API lets you compose these layouts. In the canvas, InlineTextField enables direct text editing, while fieldTransforms transforms values at render time without changing the underlying data.

React combines <form action>, useActionState, and useOptimistic to handle pending feedback and optimistic updates while keeping form submission available before JavaScript runs. The article shows how this continuity can enhance the interface after hydration without giving up the browser’s native form behavior.

The key is to keep the server action directly in action: inserting a client function breaks submission without JavaScript. For optimistic updates, useHydrated() lets the form choose between the server action and its client-enhanced version.

C# 15 introduces the union keyword to represent a value drawn from several types without forcing them into a base class or losing their type information in object. Andrew Lock shows how switch expressions enforce handling every case, and how to declare unions such as Result<T>.

One performance detail to weigh: the generated implementation stores the value in an object, boxing value types. The article demonstrates a custom implementation using TryGetValue to avoid boxing in switch expressions.

In Microsoft Agent Framework, ChatClient middleware intercepts messages exchanged with the LLM, while agent middleware operates on the agent’s overall run, including session, identity, or token-budget management. This distinction helps place logging or modification at the right level.

The C# example adds function-invocation middleware to log calls to the Researcher agent’s Tavily tool, without changing the other agents. The trace shows the function name and its arguments.

IfItQuacks lets C# code accept objects that match an interface without implementing it or sharing a base class. The [DuckTyped] attribute invokes a source generator that checks compatibility at compile time and creates an adapter—without reflection or dynamic.

Anonymous types can also act as test stubs: an object such as { Name = "Steven", Age = 90 } can satisfy an IPerson interface. Adapters also preserve identity by forwarding Equals, GetHashCode, and ToString to the wrapped instance.

CodoMetis.ValueRanges offers .NET range types to replace pairs of dates and their scattered logic. Its five variants—finite, unbounded on either side, infinite, and empty—make possible shapes and rules explicit, while operations such as Contains and Overlaps run in memory.

The companion EF Core package bridges the domain model to PostgreSQL: the same operations are translated into SQL operators through Npgsql. The article also explains the design trade-off: abstract records rather than structs, so each variant can be represented by a type hierarchy.

A remote code execution flaw in WordPress Core can let an unauthenticated attacker run code during a full-package update if the temporary directory is web-accessible. Wordfence says it blocked 62,969 attempts in 24 hours; a fix is available in version 7.1.4.

The attack hinges on racing cleanup: installer files are unpacked to a predictable path under wp-content/upgrade, and attackers are repeatedly probing files such as setup-config.php to catch the exposure window, which may last only seconds. The flaw affects versions 4.7 through 7.1.3.

CVEngine brings continuous asset discovery, vulnerability scanning, and matching against exploited CVEs into a self-hosted platform. It aims to prioritize flaws that actually apply, using read-only validation and evidence rather than presenting only a list of alerts.

Version 1.3 adds Sentinels to run scans from private networks, along with an OpenVAS integration that is disabled by default. Results feed the same inventory and severity ratings; the tool also provides a REST API and MCP integration.

Mautic is an open-source marketing automation platform that brings together campaigns, email, landing pages, and contact management. It can be self-hosted on an organization’s infrastructure, with a REST API and plugins for integration and extension.

The page also highlights drag-and-drop campaign creation, lead scoring, and privacy-focused features. Cited use cases include sending more than a million personalized, multilingual emails daily for an e-commerce business.

BillionMail combines a mail server, newsletters, and email marketing in an open-source, self-hosted package. Its repository outlines a setup flow connecting a domain and DNS verification to campaign creation and sending, with list and tag management.

The project supports Docker and installation through aaPanel. It also integrates RoundCube for webmail, offers delivery analytics, and is licensed under AGPLv3; the team running it remains responsible for hosting the service.

Metalama automates cross-cutting C# patterns with aspects that generate code at compile time, while checking architecture rules as you edit. The repetitive implementation stays out of business code and the repository, and one aspect can be applied to a method or to a set of methods selected in code.

For example, an aspect can wrap a method in try/catch to log its entry, result, and exceptions. Metalama also lets you preview and debug the transformed code, making those changes inspectable.

Motherload lets you import data files as TypeScript modules typed from their contents. It supports TOML, YAML, JSONC, JSON5, CSV, TSV, Markdown, plain text and .env files; types appear in the editor, and tsc reports parsing errors with their locations.

Type-checking uses TypeScript 7.1 content mappers, currently in beta, and requires --runExternalCode. At runtime, a preload or plugin adapts the same imports for Node.js and a range of bundlers.