Vibe Coding in 2026: What Works and What Breaks
Vibe coding in 2026, from someone who ships vibe-coded mini-apps: where it saves real time, where it quietly breaks in production, and an honest verdict.
Reviews
Django-Bolt Review: Rust-Powered Django, FastAPI Speed
Django-Bolt puts Actix and Rust under Django to hit 188K RPS. I dug through the source and benchmarks — where it beats FastAPI, and where the speed evaporates.
Claude Sonnet 5 Review: Anthropic's New Default, Benchmarked
Claude Sonnet 5 review: it nearly matches Opus 4.8 on coding, beats it on Terminal-Bench, and runs at just $2/$10 — but the tokenizer bites.
Perplexity Bumblebee: The Supply Chain Scanner Your Dev Machine Needs
Bumblebee scans npm, PyPI, Go, MCP configs and editor extensions for compromised packages without running install scripts. What it catches, where it fits.
GLM-5.2 Review: 753B Open-Weight Model That Undercuts GPT-5.5
GLM-5.2 scores 62.1 on SWE-bench Pro vs GPT-5.5's 58.6, ships under MIT, and costs $1.40/M input tokens. Benchmarks, pricing, and the China data question.
Claude Fable 5 Review: 80% SWE-Bench Pro, but Read the Fine Print
Claude Fable 5 hits 80.3% SWE-bench Pro and 29.3% FrontierCode Diamond. It also costs 2x Opus 4.8, retains your data 30 days, and silently falls back.
Devin Desktop (Formerly Windsurf): What It Is, What Changed, and Pricing
Devin Desktop is Windsurf rebranded by Cognition: an Agent Command Center, Devin Local in place of Cascade, ACP support, and Free, $20 and $200 plans.
GitHub Copilot AI Credits: Token Costs, Real Math, and Who Pays More
GitHub Copilot switched to AI credits on June 1. Token math per model, real session costs, and whether your $10/month Pro plan still makes sense.
Google Jules Review: The Async Coding Agent Worth $20/Month?
Google Jules queues coding tasks, runs them in a cloud VM, and opens PRs while you sleep. Free tier gives 15 tasks/day. Here's what worked and what didn't.
AI Bug Bounty in 2026: 76% More Reports, Programs Shutting Down
HackerOne paused payouts, Curl quit its bounty, Linux's security list is unmanageable. The AI vulnerability flood and the zero-days buried in the noise.