03 Nov 2026

feedDrupal.org aggregator

Dynamosys Insights: Node2Shell: Updating npm Packages Won’t Fix This Node.js Flaw

Node2Shell: The vulnerability beneath your application. Illustration of compressed data entering a server with a red fracture in its core.

A Brotli decoder flaw in Node.js can lead to remote code execution. Updating npm packages doesn't replace the runtime, so check the Node.js version wherever it runs: containers, build pipelines, a Drupal site's decoupled front end, and DDEV.

03 Nov 2026 5:13pm GMT

Jacob Rockowitz: Vibing Drupal - My Tips and Tricks for 10x Drupal Development using AI

Looking back on a year of AI experimentation, I want to document my tips and tricks for using AI with Drupal development. Early in this journey, after reading books like Beyond Vibe Coding, listening to the creator of Claude Code, and attending Drupal events, I saw and heard how people using AI dramatically increased their productivity.

I keep coming back to Kent Beck's quote: "The value of 90% of my skills just dropped to $0. The leverage for the remaining 10% went up 1000x. I need to recalibrate." It led me to conclude that my goal when using AI is to 10x my productivity by focusing on that remaining 10%: experience, judgment, and understanding of how Drupal works.

Here are my tips and tricks to 10x my productivity using the remaining 10% of my skills. I am highlighting those that can 2x productivity and lead you toward 10x and beyond.

Funny side note: when I asked AI to review this post, it was really unhappy that the 2x tips math didn't add up to 10x, but you get the goal of this post. My hope is that you'll scan or consume this list, take something away, and keep up with our fast-moving times.

AI

Models

I like the output and price of GPT-5.6 Luna. I'd heard that in Ultra mode it rivals the more expensive models, but when I tried it, the code was worse and it took longer.

Rather than building a complex evaluation setup, I run an occasional bake-off: one simple prompt where I already know what a good plan or code looks like. I also ask the AI to research the cost, efficiency, and gossip around my available models. That's how I learned GPT-6 Luna costs half as much as GPT-5.6 Luna,...Read More

03 Nov 2026 4:32pm GMT

The Drop Times: From Pakistan to DrupalCon Rotterdam: Community, AI, Advocacy and the Future of Drupal

Muhammad Tanweer Khan shares his DrupalCon Rotterdam experience, discussing AI's impact on developers, Drupal advocacy, public-sector adoption in Asia, and the value of community connections.

03 Nov 2026 2:12pm GMT