Tag: technical debt
Quality Debt Is the New Technical Debt
For years, we talked about technical debt as something that quietly piles up while teams ship fast and skip cleanup. You take a shortcut now, but you pay for it later, usually ...
Security Teams Are Fixing Vulnerabilities Faster Than Ever. So Why Is Software Getting Riskier?
Mitchell Johnson | | AI coding agents, AI Development, application security, automated remediation, CI/CD, dependency security, dependency selection, developer experience, devsecops, open source security, secure coding, secure software development, security policy, shift left security, software composition analysis, software risk, Software Supply Chain, technical debt, vulnerability backlog, vulnerability managementAI is speeding up dependency decisions, making point-of-selection security essential for reducing vulnerable components, downstream tickets and avoidable rework ...
Taste, Discernment, and Judgment Have Become Must-Have Engineering Skills
Gautam Korlam | | AI code review, AI coding agents, AI-generated code, autonomous coding, autonomous merge, CI/CD, code quality, code review, deterministic systems, developer productivity, devops, engineering judgment, engineering standards, human judgment, pull requests, quality gates, software architecture, software engineering, software governance, technical debtAI coding agents make code generation cheap, shifting engineering value toward standards, deterministic quality gates, contextual review and human judgment about what should ship ...
Report Shines Spotlight on 91 Vulnerabilities Fixed in Latest Update to Spring Framework
Mike Vizard | | AI cybersecurity, AI vulnerabilities, application security, Broadcom, CVEs, devsecops, Java security, open source security, open source vulnerabilities, patch management, security automation, software components, Software Supply Chain, sonatype, Spring framework, Spring vulnerabilities, technical debt, virtual patching, vulnerability managementSonatype says 91 Spring vulnerabilities affecting more than 209,000 software components highlight how AI is accelerating vulnerability discovery and creating a new patching challenge for DevSecOps teams ...
AI is Coding Us Into a Corner
Charlie Gero | | AI coding tools, AI dependency, AI hallucinations, AI patching, AI-generated code, application security, code review, code vulnerabilities, developer productivity, developer trust, frontier models, future software maintenance, Human Oversight, junior developers, secure coding, software engineering skills, software security, technical debtAI-powered patching and coding is putting us on a track towards a deepening dependency on future frontier models. The modern tools we use today to fix yesterday’s coding problems are quietly creating ...
AI-Assisted Development Under Deadline: What It Takes to Ship Production Code on an Unfamiliar Stack
Ihor Riazantsev | | AI code risk, AI coding tools, AI-assisted development, AI-generated code, Claude Code, code consistency, code review, devops teams, engineering discipline, feature isolation, manual testing, memory leak debugging, Next.js development, production readiness, production validation, production-ready code, rapid feature delivery, React development, software architecture, software engineering judgment, technical debt, TypeScript development, unfamiliar codebaseHow Claude Code accelerated development on an unfamiliar stack while proving that production-ready AI-generated code still requires human judgment ...
AI Moved the Bottleneck From Writing Code to Understanding and Trusting It
Ted Julian | | AI code generation, AI code security, AI coding tools, AI investment ROI, AI-generated code, application security, automated code review, code quality, code review, codebase visibility, compliance, dependency risk, developer productivity, devsecops, Engineering leadership, engineering metrics, engineering ROI, production incidents, pull request review, SCA, software composition analysis, software delivery, software development productivity, software governance, technical debtAI coding boosts velocity, but without stronger review, governance and codebase visibility, teams risk higher costs, security gaps and production failures. TL;DR ...
AI Is Exposing a Growing Blind Spot in Open Source Security
Aaron Mitchell | | ai, application security, open source, software development, Software Supply Chain, technical debtWith AI, teams across organizations are now building internal applications faster than ever, often pulling in open source libraries and frameworks without much thought about long-term support, lifecycle management, or security ownership ...
Survey Surfaces Multiple Challenges Measuring AI Coding Productivity
Mike Vizard | | AI coding tools, AI slop, code review, developer burnout, developer productivity metrics, Harness survey, software engineering, technical debt, token-maxxingA Harness survey reveals that while 89% of organizations see AI boosting developer productivity, a third of the workday is consumed by untracked AI tasks like fixing bugs, code reviews, and managing ...
Open Source Contribution is About More Than Just Altruism
Laura Czajkowski | | community engagement, Linux Foundation, open source ROI, open source software, private forks, Software Supply Chain, technical debt, upstream contributionPassive consumption of open source software creates hidden costs, including $670,000 annually in internal workarounds; however, organizations that shift to upstream contribution report up to 5x returns through improved talent retention and ...
GitHub’s Spec Kit Puts the Spec Back in Software Development
Tom Smith | | AI coding agents, devops automation, GitHub Copilot, GitHub Spec Kit, software governance, Spec-Driven Development (SDD), technical debt, vibe codingGitHub’s open-source Spec Kit aims to eliminate "vibe coding" by prioritizing durable specifications over vague prompts, providing a structured, agent-agnostic workflow for Copilot, Claude, and Gemini ...
The Velocity Trap: Why Shipping Faster Is Making Systems Worse
Muhammad Yawar Malik | | engineering culture, observability, reliability, Site Reliability Engineering (SRE), software delivery, technical debtThere is a particular flavour of engineering dysfunction that looks, from the outside, like peak performance. Deployments are frequent. Sprint velocity is high. The feature backlog is shrinking. Leadership is pleased. And ...
