Dan

I mean it's exciting times but not *everything* is that good

Weird how there’s a “game changing ai tool” every three hours. And every AI bro in social media makes sure we all know how it’s going to change the word.

more thoughts here:
x.com/d4m1n/statu...

full vid + ranking:

youtu.be/qcYHD3KruPI...🫡

went in expecting Claude Code to be the best code reviewer 💀

Agree! But would recommend using them before sending it for human review. This way you catch silly mistakes and don't waste the reviewer's time

5️⃣ Claude Code

❌ FFS did anybody even try setting this up? DX is 👎
❌ produced a long single comment
❌ not much actionable: missed the innerHTML issue, found MIME-type risks but no fix; lots of slop
❌ the only one that's not contextual (per file)

*Barely* better than nothing.
SUPER disappointed

4️⃣ Github Copilot

✅Blazingly fast, nice DX for GH users
✅Found missing null checks and the innerHTML problem
❌had one false positive on a backend type assertion; ❌didn’t catch MIME-type/XSS

I was pleasantly surprised, better than expected

3️⃣ OpenAI Codex

❌ DX a bit rough for new users
🆗Slower (8m+) and only flagged the MIME-type issue
❌ Only 1 comment on the MIME-type, missed the rest
✅Drafted a comprehensive fix in its own env with “Update branch / New PR” flow.

Great potential + slick workflow but didn't find all issues

2️⃣ CodeRabbit

🆗DX was alright, CLI was easy
✅Contextual, focused, and useful.
✅Caught a MIME-type bypass (BE+FE), unsafe innerHTML, and even a stray dependency; also flagged SVG/XSS risk + UI issues
✅ CLI useful in agentic flows
❌ CLI UI a bit glitchy

Elite as far as I'm concerned

1️⃣ Cursor Bug Bot

🆗 DX was alright but a bit confusing
❌Only 1 comment, but it did spot the unsafe innerHTML/DOM manipulation.
❌Missed the MIME-type/XSS issues others found.

Average but still better than no review.

Do you even need an AI code review tool?
Do they work?

Yes. Absolutely.
And I defo recommend using one.

Here's the rundown:

Prefer watching a video instead?
I got you:

youtu.be/qcYHD3KruPI...🫡

I tried all AI code review tools so you don't have to.

here's how they did (🧵):

But even so, millions are gonna ship apps they've never seen the code for.
They might store your pass in plain text, allow arbitrary sql or send email lists to the client.

I believe some of them will be useful, only by statistical chance if anything, but very few will be secure

it's gonna be a few rough years with AI in general btw.
It feels like early days of the web, there are SO MANY easy ways to exploit it it's not even fun anymore.

And many give them full permissions while coding 💀

these MCP attacks will be a lot more common too

Vibe coding will spawn millions of apps.

👉 consider all software insecure by default in 2025

always:
1. new email per signup
2. new pass in password mngr
3. enable mfa
4. never connect socials (if you do, see 1)
5. never give phone no
6. use disposable card or virtual cc

Yeah I do. I mean right tool for the job right? But for most things ts will be just fine and in some stacks it's incredibly easy to deploy + share models with the FE, so it feels quite productive.

Hope they won't copy this post

OpenAI patiently watching startups win with its models before copying them is a bold strategy that will surely not backfire.

Sorry — a bold strategy

Water pumps too yeah 😁

responsive too. almost perfect!

Sonnet 4.5 cooked 🧑‍🍳

only thing I gotta figure out is to make it use themes, it inlined colors from the JSON.

could just tweak the prompt I guess

3. In Cursor prompt using Sonnet 4.5 to build and follow JSON

(I had a PageAI codebase with TailwindCSS + rules set up tho, did not start from scratch)

1. get UI screen from Mobbin

2. use GPT-5 on ChatGPT and ask it to analyze the screen and make a handover from UI -> Dev with details as JSON

no way Sonnet 4.5 just 1-shot this🤯

did it cook or what?

my workflow:

each of these went from

"why aren't you using bro"
"what are you doing bro"

Github Copilot -> Cursor -> Claude Code -> Codex -> growing berries on my balcony

AI tool loyalty is worth about as much as a waterproof towel 😁

BREAKING: YouTube updated the Play button position so it's more accessible for left-handed ppl

whyyyyy is everything in iOS 26 so darn big and ugly 🥲

yea I did upgrade. yeah I do regret it 😭

tell me Apple execs are getting too old without telling me Apple execs are getting too old