Perplexity Bumblebee Review: The Supply Chain Scanner Your Dev Machine Needs
Bumblebee scans npm, PyPI, Go, MCP configs, and editor extensions for compromised packages, all without running a single install script. Hands-on review.
Bumblebee scans npm, PyPI, Go, MCP configs, and editor extensions for compromised packages, all without running a single install script. Hands-on review.
GLM-5.2 scores 62.1 on SWE-bench Pro vs GPT-5.5's 58.6, ships under MIT, and costs $1.40/M input tokens. Benchmarks, pricing, and the China data question.
GPT-5.5 hits 82.7% on Terminal-Bench and uses 72% fewer tokens than Claude — but loses SWE-Bench Pro to Opus 4.7. Seven weeks of real agentic use, reviewed.
Claude Fable 5 hits 80.3% SWE-bench Pro and 29.3% FrontierCode Diamond. It also costs 2x Opus 4.8, retains your data 30 days, and silently falls back.
Windsurf became Devin Desktop on June 2. Cascade dies July 1. Here's what the rebrand, Devin Local, and ACP support mean after a week with the new IDE.
GitHub Copilot switched to AI credits on June 1. Token math per model, real session costs, and whether your $10/month Pro plan still makes sense.
Google Jules queues coding tasks, runs them in a cloud VM, and opens PRs while you sleep. Free tier gives 15 tasks/day. Here's what worked and what didn't.
HackerOne paused payouts, Curl quit its bounty, Linux's security list is unmanageable. The AI vulnerability flood and the zero-days buried in the noise.
DeepSeek V4 Pro scores 80.6% on SWE-bench Verified at $1.74/M input tokens — 7x cheaper than Claude Opus 4.7. Real benchmarks, costs, and safety gaps.
AI agent guardrails from 4 real production wipes — PocketOS, Replit, Amazon. Scoped tokens, destructive-action gates, isolated backups, plan-first mode.