WordPress plugin security now depends on how fast you ship
Small WordPress plugins used to be safe because nobody looked. AI ended that. Your real security posture is release speed and update rates.
Dusan Antonijevic
Dusan Antonijevic
Co-owner and CTO of ANPS Agency. Builds multi-tenant Laravel platforms, Go services and AI features, and co-owns ANPS Themes.
AI writes correct Laravel now. Idiomatic code is the real test
Frontier models now pass Laravel's Boost benchmark. The harder test is whether the code is idiomatic, and most stacks can't measure that.
Dusan Antonijevic
With a merchant of record, the refund policy isn’t yours
A customer quoted refund terms that weren't mine or Paddle's. I refunded anyway, because with a merchant of record I'm not the merchant.
Dusan Antonijevic
AI slop is not new: we had developer slop long before AI
Copy-paste fixes, production hacks and "we'll refactor later" came first. AI just speeds slop up, and now agents write it too.
Dusan Antonijevic
What we learned building non-custodial payments at P2Flux
Direct settlement, subscriptions from one wallet approval and gas paid in USDC: notes from building our own payments product.
Dusan Antonijevic
Core Web Vitals for Laravel and Inertia apps: a practical checklist
LCP, INP and CLS for Laravel and Inertia apps with React: how to read field data, then the fixes that usually move the numbers, in the order we try them.
Dusan Antonijevic
Newsletter