Sign in

François Zaninotto

@francoisz.bsky.social
465 followers 43 following 137 posts

CEO at @marmelab, founder of react-admin & GreenFrame. #sustainability #React #Leadership #Agile #NodeJs #WebPerf #UX #Security #OSS @francoisz @francoisz@fosstodon.org

PostsRepliesMedia
François Zaninotto @francoisz.bsky.social · 24/09/2026
Developers spend more and more time building an AI harness instead of writing code themselves. But what is a good harness, according to the community? I benchmarked 246 open-source reporisories and read 57 publications to find out. marmelab.com/blog/2026/09...
marmelab.com
The State Of AI Harness Engineering 2026
We audited 246 open-source repositories and read 57 publications to better understand the trends of tooling for agentic coding.
000
Reposted by François Zaninotto
AFUP @afup.org · 23/09/2026
Profitez de cet aperçu de la conférence de @francoisz.bsky.social au Forum PHP 2026 dans l'interview du jour ! Il explique notamment que selon lui, l'IA ne va pas remplacer les devs, mais qu'elle va changer le type de projets sur lesquels on travaille. Venez l'écouter ! buff.ly/fBmeX24
L'EXPÉRIENCE AGENTIQUE, OU COMMENT TIRER LE MAXIMUM DES IA SUR VOTRE CODE
François ZANINOTTO
001
François Zaninotto @francoisz.bsky.social · 08/09/2026
StyleX makes CSS-in-JS interesting again. Typed styles in, static atomic CSS out. No runtime injection. Tokens, linting & predictable composition make inconsistency harder to ship. Sure, it's more verbose than Tailwind, but with coding agents, does it still matter? flaviocopes.com/stylex/
flaviocopes.com
A deep dive into StyleX
Learn how StyleX turns JavaScript style objects into regular CSS classes at build time, with React and Astro setup, variants, themes, and responsive styles.
041
François Zaninotto @francoisz.bsky.social · 03/09/2026
So perhaps the problem isn't that AI has broken code review. Maybe it’s that we've been using code review to solve the wrong problems. martinfowler.com/rachels-ramb...
martinfowler.com
Maybe We Shouldn't Be Reviewing All This Code
Or, perhaps the problem isn't that AI has broken code review, maybe it’s that we've been using code review to solve the wrong problems
000
François Zaninotto @francoisz.bsky.social · 03/09/2026
Automating code reviews won't solve all of those problems. Pair programming, trunk-based development, automated testing, static analysis, fitness functions and security scanning will.
100
François Zaninotto @francoisz.bsky.social · 03/09/2026
AI produces too much code for engineers to review. Perhaps it's a good time to ask why we need code reviews in the first place. Code review isn’t just about finding bugs. It’s how teams share knowledge, teach junior engineers, build collective ownership and spread architectural understanding.
110
François Zaninotto @francoisz.bsky.social · 28/08/2026
Do you really need a RAG? If you just want a natural language search over a large corpus of mostly cold documents, many alternatives will provide great results without the hassle associated with embeddings. www.lighthousenewsletter.com/p/rag-is-sim...
lighthousenewsletter.com
RAG Is Simpler Than You Think
Six approaches to retrieval-based AI, from minimal to elaborate
030
François Zaninotto @francoisz.bsky.social · 30/07/2026
Quel est le meilleur agent de codage ? D'après leurs éditeurs, ils sont tous meilleurs que les autres... Alors j'ai fait mon propre benchmark : redévelopper la même application from scratch avec 3 agents différents. marmelab.com/blog/2026/07...
marmelab.com
OpenAI Codex vs Claude Code vs Kimi Code : la battle
Quel assistant de codage choisir ? Le meilleur benchmark, c'est un même projet recodé depuis la spécification par 3 agents différents.
111
François Zaninotto @francoisz.bsky.social · 17/07/2026
TIL the /insights command on #ClaudeCode lets the agent inspect your session logs, detect when Claude went wrong, suggest fixes in your harness (CLAUDE.md, skills, hooks) and inform you of features you could have used to improve your workflow.
040
François Zaninotto @francoisz.bsky.social · 17/07/2026
"Now that it's being automated, those human capacities are revealed as the actual scarce resource. And scarce resources are valuable." Cound't agree more. #AI #SoftwareEngineering pydantic.dev/articles/the...
pydantic.dev
The Human-in-the-Loop is Tired
On reward functions, dopamine, and what it actually feels like when the code starts writing itself
000
François Zaninotto @francoisz.bsky.social · 17/07/2026
"But the bottleneck was never the code. It was always the human attention, the engineering judgment, the ability to hold a coherent vision for a system. We just didn't notice because writing code felt like the hard part."
120
François Zaninotto @francoisz.bsky.social · 29/06/2026
Maintenant disponible en extension VSCode : marketplace.visualstudio.com/items?itemNa...
marketplace.visualstudio.com
EcoLogits — Claude Code Impact - Visual Studio Marketplace
Extension for Visual Studio Code - Shows the environmental impact of your Claude Code session in the VS Code status bar (CO₂, water, energy) via the public EcoLogits API.
010
François Zaninotto @francoisz.bsky.social · 23/06/2026
Add a realtime vizualizer of the carbon impact of your Claude Code usage with ecologits-statusline, based on the EcoLogits LLM consumption model and tweaked with the data from the ML.ENERGY Leaderboard. #OSS #Sustainability github.com/DuarteVi/eco...
github.com
GitHub - DuarteVi/ecologits-statusline
Contribute to DuarteVi/ecologits-statusline development by creating an account on GitHub.
130
François Zaninotto @francoisz.bsky.social · 16/06/2026
Handoff: verify you actually understood the code Claude wrote by answering a quiz. Code review was always as much about comprehension as correctness. github.com/arimet/handoff
github.com
GitHub - arimet/handoff: Verify you actually understood the code Claude wrote — before you ship it
Verify you actually understood the code Claude wrote — before you ship it - arimet/handoff
010
François Zaninotto @francoisz.bsky.social · 26/05/2026
This also means our job as engineers is shifting from building software, to building software factories. We need new skills and a new mindset to get there.
000
François Zaninotto @francoisz.bsky.social · 26/05/2026
Software that builds software is here. I call them Agentic Software Factories. Unlike Retool or Excel, they understand natural language. As a result, any company can now get tailor-made tools for ~$10k. Custom software stops being a Fortune 500 privilege. marmelab.com/blog/2026/05...
marmelab.com
Agentic Software Factories: The Future Of Programming?
What if anyone in a company could build the exact software they need, without writing a single line of code? Agentic software factories, powered by GenAI, are making this possible - and they're redefi
100
François Zaninotto @francoisz.bsky.social · 21/05/2026
Wait for it... github.com/marmelab/ato...
020
François Zaninotto @francoisz.bsky.social · 28/04/2026
I explained how MCP server installation works in the post attached to my tweet
100
François Zaninotto @francoisz.bsky.social · 27/04/2026
getagentseal/codeburn: See where your AI coding tokens go. Interactive TUI dashboard for Claude Code, Codex, and Cursor cost observability. github.com/getagentseal...
150
François Zaninotto @francoisz.bsky.social · 23/04/2026
I keep seeing MCP servers get overlooked or misunderstood. I think that's a mistake: they're shaping up to be a must-have for any web service. Here's the pitch I've been making to non-tech clients. #AI #MCP marmelab.com/blog/2026/04...
marmelab.com
MCP Servers: Your Next User Is An AI Agent
MCP servers are the best thing since sliced bread. They extend the capabilities of AI assistants and let them connect with third-party tools. If your service doesn't have one yet, it's time to priorit
210
François Zaninotto @francoisz.bsky.social · 20/04/2026
Steve Blank's latest piece is a wake-up call: if your company is more than two years old, the world has shifted under your feet, and most of your founding assumptions probably aren't true anymore. steveblank.com/2026/03/17/y...
steveblank.com
Steve Blank Your Startup Is Probably Dead On Arrival
Your Startup Is Probably Dead On Arrival If you started a company more than two years ago, it’s likely that many of your assumptions are no longer true. You need to stop coding, building, recruitin…
000
François Zaninotto @francoisz.bsky.social · 17/04/2026
I finally managed to implement an MCP App, i.e. an interactive widget that renders inside a conversation in ChatGPT, Claude, or any other MCP-compliant agent. marmelab.com/atomic-crm/d...
000
François Zaninotto @francoisz.bsky.social · 15/04/2026
How much of your project code was written by #AI? Whether to track coding agent adoption in engineering teams or security risks introduced by vibe coding, it's time to track what Claude/Cursor/Copilot/Codex do. usegitai.com
usegitai.com
Git AI - Track AI Code all the way to production
Cross-agent observability from prompt to production. Track AI-generated code from Cursor, Claude Code, GitHub Copilot, Gemini, and more through the entire SDLC.
140
François Zaninotto @francoisz.bsky.social · 31/03/2026
The axios npm package, widely used for data fetching, has been compromised. Pin your version now. #NodeJS #Security socket.dev/blog/axios-n...
socket.dev
Supply Chain Attack on Axios Pulls Malicious Dependency from...
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...
020
François Zaninotto @francoisz.bsky.social · 26/03/2026
AI is getting better at coding every day. Time to diversify your skills. UX sense is hard to automate, easy to neglect. We built a free browser game to train it: spot the usability flaw in mini-apps, describe it, get scored by ML. #UX #OpenSource #AI marmelab.com/ux-quest/
marmelab.com
UX Quest - Train Your Usability Skills
Spot the UX flaw! Examine mini-apps with deliberate usability problems, describe what's wrong, and get scored by an AI model.
120
François Zaninotto @francoisz.bsky.social · 20/03/2026
"Who needs devs now that agents can do the job" reminds me of "who needs banks now that we have the blockchain". Same confusion. It was never about the technology. It's about trust. marmelab.com/blog/2026/03...
marmelab.com
Software Will Never Die
AI agents can now rewrite an app in hours. But software value lies in judgment, trust, and specification — not code. Here's why the craft of software engineering is evolving, not dying.
110
François Zaninotto @francoisz.bsky.social · 20/02/2026
Next time you need to build a single-page application, instead of letting your coding agent accumulate debt like crazy, point it to a well-tested and maintained open-source framework like ours!
000
François Zaninotto @francoisz.bsky.social · 20/02/2026
We've just releaased Shadcn Admin Kit version 1.5 with tons of new features, improvements and bug fixes. #OpenSource #React github.com/marmelab/sha...
github.com
Release v1.5.0 · marmelab/shadcn-admin-kit
v1.5.0 (Feb. 2026) 🚀 Features Add <TextArrayInput> component for handling arrays of text values. Add <DateTimeInput> component for date and time input support. Add <ImageField> component for displ...
130
François Zaninotto @francoisz.bsky.social · 27/01/2026
If you’re a developer, I predict that you’ll soon build less web and mobile apps and much, much more MCP Apps. Fortunately, you can continue using the language you know and love, as this standard uses the iframe as the universal UI building block.
000
François Zaninotto @francoisz.bsky.social · 27/01/2026
This is a turning point: AI assistants can now become true platforms, as they are no longer limited to text only. The assistant response is a canvas where apps can draw the UI elements necessary to perform a task.
100
François Zaninotto @francoisz.bsky.social · 27/01/2026
Generative UIs are becoming a reality: both ChatGPT and Claude now support MCP Apps, a new standard that allows tools to render tables, charts, and interactive UI widgets. #GenerativeUI #AI #MCPApps blog.modelcontextprotocol.io/posts/2026-0...
blog.modelcontextprotocol.io
MCP Apps - Bringing UI Capabilities To MCP Clients
Today, we’re announcing that MCP Apps are now live as an official MCP extension. Tools can now return interactive UI components that render directly in the conversation: dashboards, forms, visualizati...
101
François Zaninotto @francoisz.bsky.social · 23/01/2026
Laravel admins often mean Nova. It works well. But it’s paid. There’s a free alternative. #Laravel + #APIPlatform + #ReactAdmin = a powerful admin UI on top of your Eloquent models. JSX instead of PHP, but more flexibility and UI power. marmelab.com/blog/2026/01...
marmelab.com
A Free Laravel Admin With API Platform and React-Admin
Replace Laravel Nova with a flexible admin built on open standards and open-source tools.
084
François Zaninotto @francoisz.bsky.social · 21/01/2026
Why do coding agents work great in some projects but fail badly in others? In my experience, the difference is rarely the agent. It’s the codebase. Here are 40+ best practices to make coding agents faster, safer, and more productive on real-world codebases. marmelab.com/blog/2026/01...
marmelab.com
Agent Experience Best Practices for Coding Agent Productivity
Why do coding agents shine in some projects and fail in others? This article explains how to design your codebase so agents work autonomously and effectively.
053
Reposted by François Zaninotto
marmelab @marmelab.bsky.social · 08/12/2025
🛠️ Vous développez un agent IA ? Le prototype n’est que le début. Optimiser le coût, la rapidité et la pertinence représente 90 % du temps. Découvrez comment les outils d’évaluation peuvent simplifier ce processus dans le dernier talk de @francoisz.bsky.social!👇 @afup.org youtu.be/NjrbQ8aWDv8?...
youtu.be
L'évaluation des IAs : la recette secrète des agents pas trop bêtes - François Zaninotto - Forum PHP
YouTube video by AFUP PHP
042
François Zaninotto @francoisz.bsky.social · 08/12/2025
When using a backend-as-a-service like Supabase, you can only access the database through an HTTP API. Yet it is still possible to group queries into a transaction, without compromising on security. Read on to learn more. #database #security #NodeJS #supabase marmelab.com/blog/2025/12...
marmelab.com
Transactions and RLS in Supabase Edge Functions
Edge functions are a powerful way to run server-side code close to your users. But how to handle transactions and Row Level Security (RLS) in these functions?
021
François Zaninotto @francoisz.bsky.social · 24/11/2025
Generative UI is about letting agentic apps create user interfaces on the fly. A new specification called MCP Apps emerges, backed by Anthropic & OpenAI, to standardize it.It's very early stage ; to get an idea of the potential, try the popular MCP UI. blog.modelcontextprotocol.io/posts/2025-1...
blog.modelcontextprotocol.io
MCP Apps: Extending servers with interactive user interfaces
Today we’re introducing the proposal for the MCP Apps Extension (SEP-1865) to standardize support for interactive user interfaces in the Model Context Protocol. This extension addresses one of the…
031
François Zaninotto @francoisz.bsky.social · 12/11/2025
Have you come across Spec-Driven Development yet? One AI writes the specs, another writes the code. Sounds smart, but it's basically waterfall in disguise. Here’s why we should stay agile instead. marmelab.com/blog/2025/11...
marmelab.com
Spec-Driven Development: The Waterfall Strikes Back
Kiro, Spec-kit, Bmad, Tessl, and other SDD frameworks turn business analysts into Markdown reviewers. Isn't there a more agile way to use Coding Agents?
020
François Zaninotto @francoisz.bsky.social · 06/11/2025
Etsy's Web Performance team implemented the Speculation Rules API (SRA) to prefetch product listing pages from search results, resulting in significant performance gains (20-24% improvement in metrics like TTFB, FCP, and LCP). #WPO www.etsy.com/codeascraft/...
etsy.com
010
François Zaninotto @francoisz.bsky.social · 06/11/2025
"The ability to phrase our intent in natural language and receive working code does not replace the deeper understanding that comes from learning each language's design, constraints, and trade-offs." This analysis of #CodingAgents on #SoftwareDevelopment Is spot on. martinfowler.com/articles/llm...
martinfowler.com
The Learning Loop and LLMs
How continuous learning shapes effective software development with LLMs
020
François Zaninotto @francoisz.bsky.social · 30/10/2025
Do #React Server Components Improve #Performance? When compared to a pure SPA, they reduce the LCP but don't suppress the initial interactivity gap. The main performance benefit comes from completely rewriting data fetching to be Server Components-first. www.developerway.com/posts/react-...
developerway.com
React Server Components: Do They Really Improve Performance?
A data-driven comparison of CSR, SSR, and RSC under the same app and test setup, focusing on initial-load performance and the impact of client- vs server-side data fetching (including Streaming +…
021
François Zaninotto @francoisz.bsky.social · 30/10/2025
Using AI coding agents? You’re probably missing one thing: specs. I built vibe-spec, a CLI that extracts requirements from your coding agent logs and generates functional specs automatically. #AI #DevTools #OSS #softwareengineering marmelab.com/blog/2025/10...
marmelab.com
vibe-spec: Generate Specifications From Coding Agent Logs
AI coding assistants can build software in semi-autonomy, but without specifications, projects lack functional definitions. The solution? Extract problem statements directly from conversation logs.
040
François Zaninotto @francoisz.bsky.social · 23/10/2025
Time flies #Symfony
040
François Zaninotto @francoisz.bsky.social · 21/10/2025
Agentic Search surpasses Retrieval Augmented Generation (RAG): Teaching an agent to use grep is far more efficient than chunking, embedding and similarity search. #AI www.nicolasbustamante.com/p/the-rag-ob...
nicolasbustamante.com
The RAG Obituary: Killed by Agents, Buried by Context Windows
Why Retrieval-Augmented Generation Won’t Survive the Context Revolution and the End of Chunking, Embeddings, and Rerankers as We Know Them.
031
François Zaninotto @francoisz.bsky.social · 20/10/2025
How to add metadata to 100M product descriptions? Etsy Engineering shares their journey with #LLMs, eval and monitoring. Great insights about a real-life #GenAI use case. www.etsy.com/codeascraft/...
etsy.com
010
François Zaninotto @francoisz.bsky.social · 20/10/2025
Every developer hates AI hallucinations. But what if those “mistakes” are what make AI seem intelligent? Neuroscience says: noise isn’t a bug — it’s the engine of adaptability. #AIEngineering #AIAgents #LLMs #SoftwareArchitecture marmelab.com/blog/2025/10...
marmelab.com
Why AI Agents Need to Make Mistakes
Developers often try to eliminate errors from AI agents. But science shows that being wrong — within reason — is what makes intelligence adaptive.
020
François Zaninotto @francoisz.bsky.social · 10/10/2025
Scrum was revolutionary for human teams—but AI doesn't need standups, sprints, or sticky notes. The future of work requires dual-track agility: a slow lane optimized for human collaboration & meaning, and a fast lane for AI precision & speed. #agile substack.jurgenappelo.com/p/scrum-is-d...
substack.jurgenappelo.com
Scrum Is Done. Finished. History.
We're going to need dual-track business agility.
010
Reposted by François Zaninotto
marmelab @marmelab.bsky.social · 08/10/2025
Demain, c’est le Forum PHP organisé par l’ @afup.org ! Et devinez quoi ? @francoisz.bsky.social, CEO de marmelab, sera présent pour vous donner des conseils sur l'évaluation des agents IA ! 🤖 ⏰ 12h40 à 13h00 📅 9 octobre 2025 📍 Disneyland Paris 🔗 event.afup.org #ForumPHP #PHP #Symfony
012
François Zaninotto @francoisz.bsky.social · 02/10/2025
MCP servers make LLM-powered agents super powerful, but also super vulnerable to all kinds of new attacks. The core vulnerability, prompt injection, is still way too easy to trigger. #Security #AI simonwillison.net/2025/Apr/9/m...
simonwillison.net
Model Context Protocol has prompt injection security problems
As more people start hacking around with implementations of MCP (the Model Context Protocol, a new standard for making tools available to LLM-powered systems) the security implications of tools built…
011
François Zaninotto @francoisz.bsky.social · 01/10/2025
Is your frontend team making 10+ API calls per screen and waiting weeks for backend changes? New article: When you need a Backend-for-Frontend (and when you don't) 🧵 Real examples from Netflix, SoundCloud + implementation strategies marmelab.com/blog/2025/10...
marmelab.com
Do you need a Backend For Frontend?
When your frontend teams are drowning in API complexity and your backend team is overwhelmed with frontend-specific requests, the BFF pattern might be your lifeline. But is it always the right choice?
052
François Zaninotto @francoisz.bsky.social · 01/10/2025
When teams produce code faster than they can understand it, it creates what I’ve been calling “comprehension debt”. [...] When we have to edit the code ourselves, this debt is the extra time it’s going to take us to understand it first. #AI #Coding codemanship.wordpress.com/2025/09/30/c...
codemanship.wordpress.com
Comprehension Debt: The Ticking Time Bomb of LLM-Generated Code
An effect that’s being more and more widely reported is the increase in time it’s taking developers to modify or fix code that was generated by Large Language Models. If you’ve wo…
001