nunomaduro

nunomaduro

@nunomaduro.com

staff software engineer at laravel · speaker · content creator · open-source contributor · created pest, pint, pail, larastan, and more. https://youtube.com/nunomaduro

4.7K followers142 following1.9K posts

Pinned

after 48 hours, using the most productive stack in the wolrd: php, laravel, phpstorm, air, we are proud to introduce: dev-null.sh; social network for developers; sign-in with github, done!

it’s 2026. build like you’re already going to get hacked, because sooner or later you probably will collect less. only keep the customer data you actually need. anything you never store can’t leak

View full thread

don’t store tokens or api keys unless you really really really really have to. if you do, encrypt them hardcore or put them in a secrets manager. and either way, keep your encryption keys separate from the data they protect

it’s 2026. build like you’re already going to get hacked, because sooner or later you probably will collect less. only keep the customer data you actually need. anything you never store can’t leak

encrypt everything you keep. not just passwords and card numbers: names, emails, addresses, photos, uploads, all of it. if someone gets into your database or storage, they should find nothing they can read

delete what you don’t need anymore. old accounts, expired orders, stuff from years ago that nobody uses. set it up so it gets deleted automatically, not “someday"

nunomaduro reposted

can't believe we actually built this in 48h 😂

nunomaduro@nunomaduro.com

after 48 hours, using the most productive stack in the wolrd: php, laravel, phpstorm, air, we are proud to introduce: dev-null.sh; social network for developers; sign-in with github, done!

nunomaduro reposted

These guys build a Social Media with #PHP in 48 hours using AI and new PhpStorm Air plugin 😍 You can login with GitHub account to see it yourself.

nunomaduro@nunomaduro.com

after 48 hours, using the most productive stack in the wolrd: php, laravel, phpstorm, air, we are proud to introduce: dev-null.sh; social network for developers; sign-in with github, done!

just found the biggest php elephant in the world within jetbrains office, using it tomorrow on stream.. muahah

i will always care about well-crafted code behind the scenes even if we probably reach a point where output and speed are the only things that matter when producing software, personally i just can't stop caring about it

it’s kind of insane how much AI agents love nullables every nullable doubles the number of states your code can be in. a constructor with 10 nullables → +1,000 possible combinations each one is a path you’d have to reason about and test. 👎🏻

i've been polishing my ai rules framework: stupidly strict & carefully crafted rules for your code, so your project scales without slop same prompt but the code comes back 100% typed, immutable, with boundaries, with top-notch tooling, and more can't wait to show you

nothing prepares you for a database migration you think a query builder or db-agnostic layer keeps you safe for the future. it doesn't every db is different internally. stuff is either unsupported or behaves differently

if i had two weeks off just for learning, i'd spend them getting better at agentic coding: better with skills, prompting, guiding agents through everything (coding, reviewing, architecting, testing), and better at setting up loops so they can iterate and improve on their own

things changed so much in the past 12 months Opus 4.5 literally changed so many things, and everything is evolving so fast that it's honestly hard to imagine where we'll be in 5 years so excited to be alive in this decade.. literally happy to be part of this era

something i added to my omarchy dotfiles: claude no longer co-authors his commits also stopped it from using the description and forced semantic conventional commits so the commits look like i wrote them myself.. and i kind of did, i'm reviewing all of them anyway

believe it or not, one of the biggest strengths of omarchy is its community the mindset is that with AI everything is fixable and solvable, and it's so good.. when you stop overthinking problems, technical ones included, you just achieve greatness in software

it's so satisfying to open a project at the very end, right before delivery, and just refactor everything i want why? because during development i went with 100% test coverage and static analysis at level max

one thing you're going to learn with time is how similar all programming languages literally are all of them share the same kind of feature set behind the scenes: static analysis, linters, testing, frameworks, etc..

i know this is probably not sexy, but consider installing laravel/vet with a minimum release age option.. just an extra safeguard against supply chain attacks pretty much every ecosystem has this option, and now PHP has it too

PHP is about to get a new RFC for this terminal API as a terminal lover, i have to find my ways around this all the time.. so i would be really happy with this kind of API

this is looking awesome working on a omarchy plugin that lets me just speak to this text box.. and it publishes this post on the various socials i use

already done on pnpm, bun, etc. but not in composer, so just added minimum release age to laravel vet; with this, composer update now only pulls releases that are at least 7 days old.. composer require laravel/vet --dev ./vendor/bin/vet --init --minimum-release-age=7 // enjoy

i'm really happy with my omarchy dotfiles right now. i could switch to a new laptop tomorrow and have my whole setup back in under 5 minutes