https://depmedicdev-byte.github.io/ Notes on cheaper, faster, less leaky CI. Free CLIs and a small set of paid playbooks. en-us Tue, 28 Apr 2026 04:30:00 GMT https://depmedicdev-byte.github.io/blog/gemini-explains-10-workflows.html https://depmedicdev-byte.github.io/blog/gemini-explains-10-workflows.html Tue, 28 Apr 2026 04:30:00 GMT Next.js, Vite, React, Vue, Deno, Prettier, Nuxt, Svelte, MUI, TanStack Query - their primary CI workflows fed to Gemini Flash via the new /ask.html. Raw output, 30+ smells, total spend $0.002. https://depmedicdev-byte.github.io/blog/scan-five-random-repos.html https://depmedicdev-byte.github.io/blog/scan-five-random-repos.html Tue, 28 Apr 2026 02:55:00 GMT vite, prettier, axios, svelte, eslint - 50 workflows scanned via the new in-browser /scan.html tool. 158 ci-doctor findings, ~$6,279/mo modeled CI spend, the same three smells in all five repos. https://depmedicdev-byte.github.io/blog/cursorrules-starter.html https://depmedicdev-byte.github.io/blog/cursorrules-starter.html Mon, 27 Apr 2026 12:00:00 GMT cursor-rules-init scaffolds a starter .cursorrules / AGENTS.md / system prompt for Cursor, Claude Code, and ChatGPT. Stack-aware: TypeScript, React, Next.js, Python, Node servers. https://depmedicdev-byte.github.io/blog/github-actions-cost-estimate.html https://depmedicdev-byte.github.io/blog/github-actions-cost-estimate.html Mon, 27 Apr 2026 12:00:00 GMT Estimate GitHub Actions workflow cost in dollars from the YAML alone. gha-budget reads jobs, expands matrices, applies the official runner pricing, and projects monthly spend. https://depmedicdev-byte.github.io/blog/github-actions-linters-compared.html https://depmedicdev-byte.github.io/blog/github-actions-linters-compared.html Mon, 27 Apr 2026 12:00:00 GMT Comparison of the four open-source GitHub Actions linters in 2026: actionlint, ci-doctor, sherif, and octoscan. What each one catches, where each one stops, and how to combine them. https://depmedicdev-byte.github.io/blog/npm-audit-without-the-noise.html https://depmedicdev-byte.github.io/blog/npm-audit-without-the-noise.html Mon, 27 Apr 2026 12:00:00 GMT npm audit reports every CVE in every transitive dep regardless of reachability. depmedic prioritizes by reachability, severity, and fix availability. CI-friendly exit codes. https://depmedicdev-byte.github.io/blog/oss-ci-cost-benchmarks.html https://depmedicdev-byte.github.io/blog/oss-ci-cost-benchmarks.html Mon, 27 Apr 2026 12:00:00 GMT Pulled the live workflow YAML from React, Next.js, Deno, TypeScript, Vite and 15 more, priced every job, ran ci-doctor against all of them. 229 workflows, 944 real CI smells, modeled ~$51k/mo combined spend at 30 runs/day. Public methodology and dataset. https://depmedicdev-byte.github.io/blog/pin-github-actions-to-sha.html https://depmedicdev-byte.github.io/blog/pin-github-actions-to-sha.html Mon, 27 Apr 2026 12:00:00 GMT Tags are mutable. Branches are mutable. SHAs are not. pin-actions rewrites every uses: line in your workflows to a full commit SHA. Supply chain hardening in one command. https://depmedicdev-byte.github.io/blog/stop-linting-github-actions.html https://depmedicdev-byte.github.io/blog/stop-linting-github-actions.html Mon, 27 Apr 2026 12:00:00 GMT ci-doctor 0.2 ships --fix mode: auto-applies safe fixes for missing-permissions, missing-concurrency, missing-timeout, and artifact-no-retention. Comments preserved.