u/USKhokhar

Hi all, posting here after a long time.

I recently joined a new design & engineering studio as the technical co-founder, and I convinced everyone to open-source something we have been testing and using internally for our upcoming projects.

While designing and developing our projects we noticed how exhaustive the agentically-produced UIs have become. The same slop. Flat, purple or gray.

We wanted to give our products a distinctive character. A personality our upcoming users can resonate with. A design language that speaks to your eyes, while providing a pinch of nostalgia.

So we curated an internal design system which communicates directly to our agents, blurring the lines of tech-stack, setups, and dependencies. And now, we were just an MCP call or a single prompt away from writing depth-model, metallic finish components in whichever technology we were using. Everything from Tauri apps to native android.

Over time, we have polished it further, and now I am happy to announce that I convinced everyone to open-source "pudge-ui", our design system that teaches agents to make tactile, physical, 2000s-electronics interfaces. The best part is that it is tech-stack agnostic. You can be developing with any framework, for any platform, it will work.

pudge-ui: ui.pudgestudio.com

These are not just interfaces, your agent doesn't just digest how the component looks, they also digest how that physical component is supposed to function mechanically. So you are just a prompt away from adding motion, movement, haptics, and much more! The best part is the format.

It is not a component library and definitely not as versatile as something like shadcn. It has it's own use-cases, or maybe if you want to use your agent to create your own FL studio, without having it hallucinate on the complex interface.

It has 90+ (we are adding more) written specs. Each one describes the real hardware it imitates, how the mechanism works, the exact CSS, and the constraints. Agents read specs better than they read token files, so the output is faithful and works in any stack (CSS, RN, SwiftUI, Compose, Flutter). Add the MCP server and just ask your agent to "build a music player with pudge-ui." It is working magic for our team, and I would feedbacks from other people so we can improve it further.

Give it a star on github if you like it: https://github.com/pudge-studio/pudge-ui

Hi everyone, posting here after a really long time.

Our industry is experiencing a major shift, we are getting closer to the reality of agentic programming every single day. Though I'm all in for agentic programming, I don't think it should come at the cost of our codebases getting compromised because an LLM decided to install a compromised dependency.

With supply-chain attacks being on the verge of becoming part of our daily lingo as developers, especially in the js/ts ecosystem, I've built a vs-code extension which scans your lock files (npm/yarn/pnpm, all three supported) against the listings on Github Advisory Database and osv.dev. Based on the listing it determines the health status of your project. It also scans dependencies which were not installed by you but are required by other dependencies to function properly. Based on the scan, you get four status in the sidebar:

SOS Alert - Your installed version is compromised. Act now.
Don't Upgrade - You're safe, but a newer version is compromised.
Don't Downgrade - You're safe, but an older version is compromised.
Passed - Green check. All safe.

This is how the extension reporting looks:

https://preview.redd.it/c8df2fjegs5h1.png?width=2624&format=png&auto=webp&s=ce506f033beb83d97915281ebf2888c456428fd4

The scanning is done:

- Polling based: every 30 minutes.

- every time you open the window.

- can be manually triggered by commands.

Right now it only scans via osv and gha, I plan to integrate more reliable and faster sources like synk in future. Would love everyone's opinion on this since I did not do much research in this and just built it on saturday.

The extension can be installed from: https://marketplace.visualstudio.com/items?itemName=uskhokhar.trust-me-bro-vsc

The codebase is available at: https://github.com/USKhokhar/trust-me-bro

Please give it a try. Rate it on marketplace if you like and star it on github if you like it a little extra. I'm also posting this here seeking open-source contributors who are more experienced and knowledgable than me to help improving this project.

Thank you. Peace :)

I got tired of flat AI-generated UI, so I wrote a 2000s tech inspired skeuomorphic theme spec-based design system agents can build from

I built an open-source vs-code extension to scan vulnerable dependencies and avoid getting compromised via another supply-chain.