Show HN: OpenNutrition – A free, public nutrition database
(opennutrition.app)
Nutrition search, reimagined.
Nutrition search, reimagined.
Digital Archivists: Protecting Public Data from Erasure
(ieee.org)
Through clever usage of APIs, the Library Innovation Lab at Harvard Law School has created an archive of Data.gov, home to 311,000 public datasets
Through clever usage of APIs, the Library Innovation Lab at Harvard Law School has created an archive of Data.gov, home to 311,000 public datasets
Building an idempotent email API with River unique jobs
(riverqueue.com)
We use an email service to send out various River-related notifications. Despite our best efforts setting up SPF, DKIM, and DMARC, we were still getting reports of mail going to spam, so we started looking into alternate mailing providers to see how they'd fare by comparison. Something we noticed while researching is that a shocking low number of them have API facilities to guarantee idempotency — a surprise because email is such a sensitive topic.
We use an email service to send out various River-related notifications. Despite our best efforts setting up SPF, DKIM, and DMARC, we were still getting reports of mail going to spam, so we started looking into alternate mailing providers to see how they'd fare by comparison. Something we noticed while researching is that a shocking low number of them have API facilities to guarantee idempotency — a surprise because email is such a sensitive topic.
Show HN: I indexed 25,000 Shopify stores to build an embedded shopping API
(searchagora.com)
"My wife asked me for a pair of red shoes for Christmas. I quickly typed it into Google and found a combination of ads from large retailers and links to a 1948 movie called 'Red Shoes'. I decided to build Agora to solve my own problem (and stay happily married)."
"My wife asked me for a pair of red shoes for Christmas. I quickly typed it into Google and found a combination of ads from large retailers and links to a 1948 movie called 'Red Shoes'. I decided to build Agora to solve my own problem (and stay happily married)."
Azure's Weakest Link? How API Connections Spill Secrets
(binarysecurity.no)
Binary Security found the undocumented APIs for Azure API Connections. In this post we examine the inner workings of the Connections allowing us to escalate privileges and read secrets in backend resources for services ranging from Key Vaults, Storage Blobs, Defender ATP, to Enterprise Jira and SalesForce servers.
Binary Security found the undocumented APIs for Azure API Connections. In this post we examine the inner workings of the Connections allowing us to escalate privileges and read secrets in backend resources for services ranging from Key Vaults, Storage Blobs, Defender ATP, to Enterprise Jira and SalesForce servers.
Directus – real-time REST and GraphQL API of any SQL database
(github.com/directus)
Directus is a real-time API and App dashboard for managing SQL database content.
Directus is a real-time API and App dashboard for managing SQL database content.
Financialdata.net – Stock Market and Financial Data API
(financialdata.net)
Here you can find a list of all API endpoints, along with their descriptions, required or optional query parameters, and sample responses.
Here you can find a list of all API endpoints, along with their descriptions, required or optional query parameters, and sample responses.
Stock Market and Financial Data API
(financialdata.net)
Our API provides access to a variety of financial information.
Our API provides access to a variety of financial information.
Could AI bring about a hypermedia renaissance?
(dabapps.com)
Over the past decade or so, as APIs have moved toward JSON as the de facto standard format, some developers and architects attempted to bring hypermedia concepts along for the ride – embedding links and controls directly in JSON responses rather than just returning raw data and IDs.
Over the past decade or so, as APIs have moved toward JSON as the de facto standard format, some developers and architects attempted to bring hypermedia concepts along for the ride – embedding links and controls directly in JSON responses rather than just returning raw data and IDs.
Okta Bcrypt incident lessons for designing better APIs
(n0rdy.foo)
Hello there! If you follow tech news, you might have heard about the Okta security incident that was reported on 1st of November. The TLDR of the incident was this:
Hello there! If you follow tech news, you might have heard about the Okta security incident that was reported on 1st of November. The TLDR of the incident was this:
Show HN: I indexed 10M Shopify products to build an API
(searchagora.com)
"My wife asked me for a pair of red shoes for Christmas. I quickly typed it into Google and found a combination of ads from large retailers and links to a 1948 movie called 'Red Shoes'. I decided to build Agora to solve my own problem (and stay happily married)."
"My wife asked me for a pair of red shoes for Christmas. I quickly typed it into Google and found a combination of ads from large retailers and links to a 1948 movie called 'Red Shoes'. I decided to build Agora to solve my own problem (and stay happily married)."
The missing cross-platform OS API for timers
(gaultier.github.io)
Most serious programs will need to trigger some action at a delayed point in time, often repeatedly: set timeouts, clean up temporary files or entries in the database, send keep-alives, garbage-collect unused entities, etc. All while doing some work in the meantime. A blocking sleep won't cut it! For example, JavaScript has setTimeout. But how does it work under the hood? How does each OS handle that?
Most serious programs will need to trigger some action at a delayed point in time, often repeatedly: set timeouts, clean up temporary files or entries in the database, send keep-alives, garbage-collect unused entities, etc. All while doing some work in the meantime. A blocking sleep won't cut it! For example, JavaScript has setTimeout. But how does it work under the hood? How does each OS handle that?
Ask HN: Is software engineering just patching APIs and wrangling Kubernetes?
(ycombinator.com)
Does anyone else feel disillusioned with the modern software engineering job? It often feels like it's just stitching together APIs, wrestling with React state, and managing Kubernetes clusters rather than building something truly exciting.
Does anyone else feel disillusioned with the modern software engineering job? It often feels like it's just stitching together APIs, wrestling with React state, and managing Kubernetes clusters rather than building something truly exciting.
Anthropic builds RAG directly into Claude models with new Citations API
(arstechnica.com)
On Thursday, Anthropic announced Citations, a new API feature that helps Claude models avoid confabulations (also called hallucinations) by linking their responses directly to source documents.
On Thursday, Anthropic announced Citations, a new API feature that helps Claude models avoid confabulations (also called hallucinations) by linking their responses directly to source documents.
Perplexity launches Sonar, an API for AI search
(techcrunch.com)
Perplexity on Tuesday launched an API service called Sonar, allowing enterprises and developers to build the startup’s generative AI search tools into their own applications.
Perplexity on Tuesday launched an API service called Sonar, allowing enterprises and developers to build the startup’s generative AI search tools into their own applications.
Redefining Our SDKs Developer Experience
(apideck.com)
At Apideck, we are passionate about delivering the best tools to help developers build integrations effortlessly. Today, we’re thrilled to announce the release of our new generation of Apideck Unify SDKs, now powered by Speakeasy. These SDKs mark a significant leap forward in developer experience, reliability, and ease of use.
At Apideck, we are passionate about delivering the best tools to help developers build integrations effortlessly. Today, we’re thrilled to announce the release of our new generation of Apideck Unify SDKs, now powered by Speakeasy. These SDKs mark a significant leap forward in developer experience, reliability, and ease of use.
Show HN: Missio – AI Agent and Copilot for Your APIs
(missio.ai)
Connect to all your existing tools, save hundreds of hours on repetitive tasks and workflows and keep your team focused on building better product.
Connect to all your existing tools, save hundreds of hours on repetitive tasks and workflows and keep your team focused on building better product.
Refactoring with Codemods to Automate API Changes
(martinfowler.com)
Refactoring is something developers do all the time—making code easier to understand, maintain, and extend. While IDEs can handle simple refactorings with just a few keystrokes, things get tricky when you need to apply changes across large or distributed codebases, especially those you don’t fully control. That’s where codemods come in. By using Abstract Syntax Trees (AST), codemods allow you to automate large-scale code changes with precision and minimal effort, making them especially useful when dealing with breaking API changes.
Refactoring is something developers do all the time—making code easier to understand, maintain, and extend. While IDEs can handle simple refactorings with just a few keystrokes, things get tricky when you need to apply changes across large or distributed codebases, especially those you don’t fully control. That’s where codemods come in. By using Abstract Syntax Trees (AST), codemods allow you to automate large-scale code changes with precision and minimal effort, making them especially useful when dealing with breaking API changes.
ReddAPI: The Simplest Way to Access Reddit's Data
(ycombinator.com)
I’m excited to share something we’ve been working on: ReddAPI.online, a lightweight, developer-friendly API for Reddit.
I’m excited to share something we’ve been working on: ReddAPI.online, a lightweight, developer-friendly API for Reddit.
Is there such a thing as "private, interactive databases" for SaaS's
(ycombinator.com)
So i've been building a product and my clients really hate the idea that their code is stored on my database (unencrypted). The problem is that I need to process the data in the background often and thus I cannot store it end-to-end encrypted. Is there any service that allows you to deploy some sort of database that only the client accesses and at the same time allows me to process it somehow maybe via apis?
So i've been building a product and my clients really hate the idea that their code is stored on my database (unencrypted). The problem is that I need to process the data in the background often and thus I cannot store it end-to-end encrypted. Is there any service that allows you to deploy some sort of database that only the client accesses and at the same time allows me to process it somehow maybe via apis?
Show HN: The all-in-one fake API
(fooapi.com)
Dummy data for your projects, fast and simple. Users, products, posts, comments and more!
Dummy data for your projects, fast and simple. Users, products, posts, comments and more!
Show HN: Llama 3.3 70B Sparse Autoencoders with API access
(goodfire.ai)
We have trained sparse autoencoders (SAEs) on Llama 3.3 70B and released the interpreted model for general access via an API.
We have trained sparse autoencoders (SAEs) on Llama 3.3 70B and released the interpreted model for general access via an API.
UIs Should Be Versioned, Just Like We Version APIs
(okayfail.com)
Every organization that offers an application programming interface almost immediately starts to version it.
Every organization that offers an application programming interface almost immediately starts to version it.
Writing and testing a paginated API iterator in Go
(thibaut-rousseau.com)
Go 1.23, amongst other features, brought Iterators to the standard library.
Go 1.23, amongst other features, brought Iterators to the standard library.
Show HN: Gribstream.com – Historical Weather Forecast API
(gribstream.com)
Leverage The National Blend of Models (NBM) & The Global Forecast System (GFS)
Leverage The National Blend of Models (NBM) & The Global Forecast System (GFS)
Exploiting McDonald's APIs to hijack deliveries and order food for a penny
(eaton-works.com)
API flaws in the McDonald’s McDelivery system in India, one of the world’s most popular food delivery apps, enabled a variety of fun exploits:
API flaws in the McDonald’s McDelivery system in India, one of the world’s most popular food delivery apps, enabled a variety of fun exploits: