SERIES://Review Bomb

17 parts in this series

Part 172026-04-23

> Your Phone as a Terminal: One Command, One QR Code, No SSH Client

A code review of TermBeam, a Node CLI that shares a local terminal to your phone over a QR code — no SSH, no port forwarding, no static IP.

#opensource (22)#javascript #security (7)#devtools (2)

Part 162026-04-19

> htop for Your Git History

A code review of gittop, a Go TUI that turns a dozen git log incantations into a seven-tab dashboard — with a participle-based filter language and braille-rendered charts. I wrote the project's first 22 stats tests and opened the PR.

#opensource (22)#go (5)#git (2)#tui

Part 152026-04-14

> What's Actually in Your Docker Image? Reading the Parser That Tells You

A Rust TUI that inspects multi-gigabyte Docker images using 80 MB of RAM where dive chokes. I read the streaming tar-in-tar parser, wrote the project's first 55 unit tests, and got them merged same day.

#opensource (22)#rust (10)#docker (2)#devtools (2)

Part 142026-04-12

> When AI Writes Your Firewall, Check the Math

An AI-generated eBPF firewall with 8,500 lines of Rust, an LLM honeypot, and a suspicion scoring bug that made its own behavioral engine useless. I read the code, fixed the math, and wrote it up.

#opensource (22)#rust (10)#security (7)#ai (12)

Part 132026-04-09

> A Rust TUI for Your UniFi Network That Actually Takes Code Review Seriously

A code review of Unifly, a Rust CLI and TUI dashboard that tames Ubiquiti's split API mess into 27 commands and 10 monitoring screens — plus a contributed NAT update feature.

#opensource (22)#rust (10)#networking #cli (3)

Part 122026-04-06

> Your Artifact Registry Doesn't Need 2 GB of RAM

A deep-dive into Nora, a 32 MB Rust binary that replaces Nexus and Artifactory — serving seven package protocols on under 100 MB of RAM.

#opensource (22)#rust (10)#devops (2)#docker (2)

Part 112026-04-02

> Your Encrypted Backups Are Slow Because Encryption Isn't the Bottleneck

A look at Concryptor, a Rust CLI that pipelines io_uring and AES-256-GCM to hit GB/s file encryption on commodity NVMe — and the CI cleanup PR that followed.

#opensource (22)#rust (10)#security (7)#cli (3)

Part 102026-03-30

> The Blackwall Between Your AI Agent and Your Filesystem

A code review of greywall, a container-free sandbox that isolates AI coding agents with kernel-level enforcement — no Docker required.

#opensource (22)#security (7)#go (5)#ai (12)

Part 92026-03-29

> Why Your SFTP Transfer Is Stuck at 2 MB/s (and the Fix Is a Protocol from 1983)

How a 2 MB/s file transfer on localhost exposed a protocol bottleneck in russh-sftp — and why cubic switched to SCP to fix it.

#opensource (22)#rust (10)#ssh #tooling (7)

Part 82026-03-18

> Finding Blocking Code in Async Rust Without Changing a Single Line

A code review of hud, an eBPF profiler that attaches to running Tokio processes and finds blocking code without recompilation.

#opensource (22)#rust (10)#performance (2)#async

Part 72026-03-14

> Nobody Reviews Their Agent's Code

A code review of crit, a Go tool that brings PR-style inline review to AI agent output with multi-round feedback loops.

#opensource (22)#go (5)#ai (12)#tooling (7)

Part 62026-03-04

> Your LLM Doesn't Need 200 Lines of Test Output

A code review of tokf, a Rust CLI that compresses terminal output for LLM context windows — with 40 built-in filters and Claude Code integration.

#opensource (22)#rust (10)#ai (12)#tooling (7)

Part 52026-03-02

> This CLI Launches Parallel AI Agents. It Didn't Launch on Linux.

A deep-dive into iloom's codebase after its parallel AI agent workflow failed on Linux — and the four issues filed to fix it.

#opensource (22)#typescript #ai (12)#tooling (7)

Part 42026-03-01

> Your Benchmarks Are Lying to You (And This 148-Star Crate Knows Why)

A code review of Tango, a Rust benchmarking harness that interleaves baseline and candidate runs to eliminate thermal drift and scheduling noise.

#opensource (22)#rust (10)#performance (2)#benchmarking

Part 32026-02-27

> Your RSS Feeds Are Broken and This Rust Tool Fixes Them

A code review of rss-funnel, a Rust-based RSS processing pipeline that filters, merges, and transforms feeds with a YAML config and web UI.

#opensource (22)#rust (10)#rss #tooling (7)

Part 22026-02-27

> I Read 9,000 Lines of a Stranger's Mergetool

A code review of ec, a terminal-native 3-way git mergetool in Go that replaces vimdiff with a sane TUI for resolving merge conflicts.

#opensource (22)#git (2)#go (5)#tooling (7)

Part 1

> Your Package Manager's Installer Doesn't Know Fish Exists

A deep-dive into parm, a Go binary package manager for GitHub Releases — and why CLI tool installers keep ignoring fish shell users.

#opensource (22)#go (5)#cli (3)#tooling (7)