Insights & Resources
Tutorials, industry news, and practical advice on Drupal, WordPress, Laravel, React, and modern web development.
Page 1 of 4
Security alertPHP2Shell: Two Critical PHP Flaws Hit Every WordPress and Laravel Site. Here's the Patch Plan
PHP shipped emergency fixes for CVE-2026-109618 and CVE-2026-109619 on October 21. Cloudflare's WAF rules help, but they are a stopgap. What agencies should do today.
Drupal AI 1.5.0 Splits Into Standalone Projects: What Your Upgrade Path Looks Like
Drupal AI 1.5.0 moves five bundled submodules into independent projects. Here is what changes, who is affected, and how to plan your migration.
Congratulations to PerfectVision on a Record 8th Annual Charity Golf Classic
PerfectVision's 8th annual Boys & Girls Club tournament raised $381,643.58. A congratulations from the team that built their site, and the features we think matter most for an event like this.
Security noticeWordPress 7.1.3 Security and Maintenance Release: What Agencies Need to Know
WordPress 7.1.3 fixes 7 security issues and 4 bugs. Here's what changed, how urgent the update really is, and how we handle it across client sites.
Caliber Is Live: We Launched the Product Our Data Supported, Not the One We Planned
Caliber went public at caliberstats.com after our own review showed the model didn't beat the closing line. What we cut, what we built instead, and the launch-weekend engineering behind it.
Drupal 12 Beta 1 Is Here: PHP 8.5, Removed Extensions, and What to Test Now
Drupal 12.0.0-beta1 landed with PHP 8.5 as the minimum and several core extensions removed. Here is what agencies need to audit before GA.
Drupal 12 Removes Search, Claro, and Olivero from Core: What Agencies Must Do Before the Upgrade
Drupal 12 drops three core components. Here's what that means for client sites, upgrade timelines, and how to audit dependencies before they become surprises.
How to Read a Web Development Proposal Before You Sign It
The line items that matter, the red flags hiding in vague scopes, and the questions that separate a real partner from an expensive mistake.
WordPress 7.1.1 Is Out: 11 Security Fixes and What Agencies Should Do Today
WordPress 7.1.1 landed September 17 with 11 security fixes and 36 bug patches. Here is our agency read on urgency, risk, and upgrade order.
Drupal SA-CORE-2026-013: The CKEditor 5 XSS, Who Is Actually Exposed, and How Fast to Patch
Drupal patched a moderately critical CKEditor 5 XSS on September 16. Anyone who can edit content can target your admins. Who is exposed, and how fast to move.
Laravel MCP 1.0: Stateless Servers, Searchable Tool Catalogs, and the Upgrade That Breaks Your Tests
Laravel MCP 1.0 ships protocol 2026-07-28, drops sessions, and adds searchable tool catalogs and cache hints. What changed, and what the upgrade actually costs.
Vacuum: PostgreSQL Monitoring and Schema Linting for Laravel
Vacuum catches PostgreSQL bloat, wraparound risk, and missing indexes in Laravel apps, both at runtime and during CI. Here is our agency take.
Caliber, Six Months In: What a $7/Month SaaS Taught Us
Six months of production on a sports-analytics engine running one $7 droplet: 181 days without a reboot, 4,700+ projections graded, and three silent bugs worth studying.
Drupal 11 Adoption at 36%: The December EOL Cliff Every Agency Needs to Plan Around
Drupal 11 is on 36% of reporting sites. On December 9, 2026, Drupal 10 hits EOL. Here's what the numbers mean and what to do before the deadline.
How We Actually Use AI-Assisted Development in 2026 (And Where We Don't)
An honest breakdown of where AI coding tools earn their keep in our agency workflow, where they fail, and the review gates that keep client code safe.