Notes
Insights & Guides
Technical notes, tutorials, and thought leadership on headless architecture and modern web development.
All notes

AI for a Small Business in Hull and East Yorkshire
No Hull version of the technology exists, but there is a Hull version of the constraint. What I tell local businesses to try first, what to leave alone, and how to know within three months if it worked.
ai
Weekly round-up: a PHP patch that matters more than the Magento one
A critical PHP release, no new Magento bulletin, a Supabase TLS date 18 days out, and WordPress 7.2 Beta 1.
roundupmagentosupabase
PHP just had its worst week in years. My HD CMS clients slept through it.
Two 9.2-rated PHP vulnerabilities dropped on 21 October. If you run PHP, patch today. If you're tired of weeks like this, here's the other way to build.
headlessperformance
How to Set Up Claude for Your Business
Buying seats is not a rollout. The order I actually set it up in: one job, one person, a project with real examples, and connectors switched off for the first fortnight.
ai
Weekly round-up: Magento APSB26-153 and a Supabase TLS deadline
Adobe's APSB26-153 has five critical Magento fixes, Supabase disables old TLS 1.2 ciphers on 10 November, and the .NET SDK grows up.
roundupmagentosupabase
Claude vs ChatGPT for a Small Business: The Honest Comparison
I pay for both and build with Claude Code daily. Here's where each one is genuinely better, what they really cost, and the two-hour test that settles it.
ai- Read note
Weekly round-up: Nuxt 4.6, scoped Supabase tokens, and a December deadline
Nuxt 4.6 and the end of Nuxt 3, scoped Supabase personal access tokens, the 1 December adapter removal, and WordPress 7.1.3.
roundupsupabasenuxt - Read note
16,326 Supabase Databases Were Left Exposed. Here's Why
UpGuard found over 16,000 public Supabase databases leaking real personal data this week. The cause traces back to one setting, and it's worth checking on your own project.
supabaseai - Read note
Weekly round-up: Postgres security release, OrioleDB beta, and Supabase Middleware 1.0
Supabase's Postgres security release with four breaking changes, OrioleDB in public beta, Supabase Middleware 1.0, and a note on WordPress 7.1.2.
roundupsupabasewordpress - Read note
Is Claude AI Good for Small Business? A Developer's Honest Take
A senior developer's honest, first-person take on whether Claude is actually useful for a small business, and where it isn't.
ai - Read note
Weekly round-up: a critical WordPress RCE, Nuxt's build layer swap, and Claude gets serious about small business
A critical WordPress RCE worth patching today, Nuxt 4.5's build layer swap, Claude for Small Business grows up, and a quick look at this month's Supabase changelog.
roundupwordpressnuxtaisupabase - Read note
Weekly round-up: StyleSmuggler clean-up, a Supabase deadline, and the Claude Code limits shuffle
A week on from the Magento zero day, the mopping-up is where the real work is. Plus a Supabase logs endpoint being removed on 23 September, and the Claude Code limits change that is both a rise and a cut.
roundupmagentosupabaseai