MurphyA/hacker-news huggingface dataset:
Show HN: Open-source Next.js 15 boilerplate – auth, DB, intl, tests, monitoring
by creativedg | 2025-08-28 14:38:31+00:00
I started this boilerplate in July 2020 and I’ve been maintaining it for 5 years. It began on Next.js 9 and kept upgrading to Next.js 15+ (App Router), while upgrading the stack over time (Tailwind 1 → 4, ESLint 8, swapping Cypress → Playwright, etc.). The goal is simple: I kept rebuilding the same setup, so I packaged it and kept it updated.

What you get (preconfigured, keep only what you need):

- Next.js 15 (App Router) + TypeScript + Tailwind 4

- Auth with Clerk (magic links, MFA, social, passkeys)

- I18n via next-intl

- DB with Drizzle ORM (PGlite locally)

- Forms with React Hook Form + Zod validation

- Testing: Vitest (unit), Playwright (integration/E2E)

- CI with GitHub Actions; Storybook for UI work

- SEO (Open Graph, JSON-LD, sitemap, robots)

- Observability: Sentry, logging with LogTape, log management & uptime/monitoring

- Security: Arcjet (bot detection, rate limiting, shield rules)

- DX details: ESLint/Prettier, Lefthook + lint-staged, Commitlint, absolute imports, bundle analyzer

- AI code review

It’s free and open source (MIT). Today the project sits around 11.8k GitHub stars and 2.2k forks. I’m still actively maintaining it and adding features.

Repo: https://github.com/ixartz/Next-js-Boilerplate

Why I built it

Spinning up auth, a DB, i18n, tests, and lint/format/CI for each new app was repetitive. This gives me (and hopefully you) a production-ready base in minutes, with opinionated defaults you can start.

I’m open to suggestions and feedback, what would you like to see next? I’ll hang around in the comments to answer questions.
by Dhavidh | 2025-08-28 14:38:36+00:00
Am David a solo entrepreneur, whose really bad at marketing and a self taught developer and spent the last 10 months on building insteinAI, because i really love Computer use model and believe it the next big thing but here's the thing am really bad at marketing, i tried to make sure i post on twitter everyday maybe i will get lucky and get a viral tweet one day and even ran a 25 dollars ads on twitter but i only got back bot responses, while am not even sure what always going on reddit but am always getting banned and yes i can say this is my 10th post on reddit and at most only got 3 points ups but maybe this time can be different even if it worth roasting my little SaaS project am up for it to help improve it and tell me what am doing wrong and not
by mtalantikite | 2025-08-28 14:38:53+00:00
This reminded me of something Milford Graves said in a book (paraphrasing): "The first sound we encounter is our mother's heartbeat in the womb -- and it swings!" [1][2]

[1] https://www.inventorypress.com/product/milford-graves-a-mind...

[2] https://en.wikipedia.org/wiki/Milford_Graves
by account42 | 2025-08-28 14:39:16+00:00
But this isn't really a boolean problem - even in your example there is another mistery argument: nil

And you can get the same problem with any argument type. What do the arguments in

copy(obectA, objectB, "")

mean?

In general, you're going to need some kind of way to communicate the purpose - named parameters, IDE autocomplete, whatever - and once you have that then booleans are not worse than any other type.
by mikewarot | 2025-08-28 14:39:21+00:00
Strong agree. I've been making more progress on my passion project in the last few weeks than I have in a year, because it helped me break out of analysis paralysis.

I'm really, really, loving the agentic flow, where it digs itself out of syntax errors and the like.

Current tools: Visual Studio Code/GitHub ChatGPT5(Preview)
by yalogin | 2025-08-28 14:39:26+00:00
If TPM is used then the regular session cookies are also secure, just in a different way. One can use hardware based attestation to tie the session token/cookie to the device and so they cannot be stolen or forged.

DBSC will run into all the same problems on platforms that don’t support TPMs. Not sure how this is changing the landscape. It’s just another implementation of the same thing.
by bravetraveler | 2025-08-28 14:39:49+00:00
The other poster likely presented themselves as a company, service contract and all: you presented yourself as a retail customer, thanks to Amazon

They offer... what? The same insurance one might get at Boost Mobile.

edit: To be fair, I haven't read your link/agree in spirit: faulty is faulty, responsibility, etc. There is a difference, though.
by morleytj | 2025-08-28 14:40:30+00:00
It's very common to see the particular syntactic structure of restating a point in the following general manner from Claude/ChatGPT in my experience and that of others:

"It's not X -- it's Y." or "This isn't just X -- It's actually Y."

Usually with an emdash there as well for the separation. As I said it's very plausibly becoming more common among people not using LLM-assisted writing too, just from seeing the stylistic approach used more often and having it spread naturally, but I do have been seeing it spread with dramatic speed over the last couple years. I even catch myself using other phrasing more often from reading it more. I think it's just part of how language spreads, honestly.
by IAmBroom | 2025-08-28 14:40:34+00:00
That is a hysterically wrong statement.

It is true of Solitaire, Minesweeper, Calculator, and Notepad, and probably about the same number of programs on other OSes. (Notepad has recently had an important expansion of functionality, but it didn't NEED that change.)

It's also true of some dinosaurs I have on my system, that copy DVDs and so forth.

It's not true of most other applications, nor can it be true, unless the app works in a sealed, unchanging environment.

Even then... Voyager 2 recently required a software upgrade, IIRC.
by jokoon | 2025-08-28 14:40:41+00:00
This doesn't surprise me.

It's central to understand that mental health can alter perception and judgment, even common mental illnesses like depression and anxiety.

I have chronic depression, and even after treating it for 15 years, I still realizes after the fact, despite being attentive to how I behave, that I just think differently when I am depressed.

It's very common for mentally ill people to think they are being persecuted. We also should still inform people more about mental illness, so both are true.

Illnesses that involves psychosis are not a joke and more severe than your average depression, and sadly I would be careful and not 100% trustworthy of somebody who is having such illness.
by branko_d | 2025-08-28 14:40:56+00:00
Most other brands had very similar problems (including my trusty Nokia at the time). You can still attenuate antennae on modern phones if you hold it just right. It's just a matter of physics.

Here is what Nokia N97 does when you "hold it wrong":

https://www.youtube.com/watch?v=shR4jITiG48
by joshstrange | 2025-08-28 14:41:09+00:00
Normally you'd name the field `created_at`, `updated_at`, or similar which I think makes it very clear.

> Making a boolean a datetime, just in case you ever want to use the data, is not the kind of pattern that makes your code clearer in my opinion.

I don't follow at all, if your field is named as when a thing happened (`_at` suffix) then that seems very clear. Also, even if you never expose this via UI it can be a godsend for debugging "Oh, it was updated on XXXX-XX-XX, that's when we had Y bug or that's why Z service was having an issue".
by wat10000 | 2025-08-28 14:41:14+00:00
> Think about the fact that the rather relevant update of 'ok, she actually wasn't even deported' didn't make it into your bubble, and why that might be.

Your incredible condescension is not helping your argument any. I got the entire story at once. The only thing that saved her from being deported was the timely action of her husband and her lawyer to get the conviction vacated before that could actually happen. If the lawyer hadn't been quite as good, or the local court hadn't been quite as fast, she would have been deported like ICE wanted to. Do you find that acceptable? Do you think that doesn't qualify as being anti-immigration?

A million fucking apologies for being imprecise with my description, jesus.

> The US does not deport El Salvadorans to CECOT.

Absolutely complete 100% horseshit. The administration deported them in full knowledge of where they were going to end up. They knew it, and you know they knew it. Saying they didn't deport people to CECOT is like saying that I didn't kill the guy, I just pushed him out the window, gravity and the pavement are what killed him. Civilized countries do not deport people when they're facing horrible human rights abuses on the other end.

And what about all the Venezuelans who got deported to CECOT? Did their home country suddenly switch? Is Venezuela too dangerous and CECOT was better? Did the administration think El Salvador was a nice safe place for them to go, and were totally blindsided when they ended up in CECOT? Come on, man. You're either being ridiculously disingenuous in a bizarre attempt to make a point, or you're proving my point by doing exactly what I said these supposedly "pro-immigration" people do, making the absolute worst excuses to defend the clearly anti-immigration actions of this administration.
by teekert | 2025-08-28 14:41:32+00:00
To me that is not a paradox, just logical, with very low incidence you just find much more false positives than real positives. What is paradoxical about that?

It's why we don't screen for just any condition in the general population. I.e. we just do it for 65+ y/o's, 3 packs/day smokers because there we may actually find it worth the cost of the program.

There's no contradiction anywhere in this scenario, just people's incorrect intuitions meeting (mathematical) reality.
by sho_hn | 2025-08-28 14:42:12+00:00
I understand the point you're making, but I think it's not a good one.

The failure mode for getting a self-driving car right is grave. The failure mode for rendering game graphics imperfectly is to require a bit of suspension of disbelief (it's not a linear spectrum given the famous uncanney valley, etc., I'm aware). Games already have plenty of abstract graphics, invisible walls, and other cludges that require buy-in from users. It's a lot easier to scale that wall.
by giancarlostoro | 2025-08-28 14:42:23+00:00
I think you kind of answered it "Ingenieur" and "Engineer" could be assumed to be roughly the same, so I could see the confusion there.

That trick with the asterisk reminds me of how in Spanish you'll see people using @ to do similar, @ being a place holder for two different possible letters specifically "o" and "a" which can be masculine or feminine depending.

This makes sense, thank you!
by ACCount37 | 2025-08-28 14:42:41+00:00
Does an average user appreciate this?

Do you?

The first question matters because frying an AI with RL on user feedback means that the preferences of an average user matter a lot to it.

The second question matters because any LLM is incredibly good at squeezing all the little bits of information out of context data. And the data you just gave it was a sample of your writing. Give enough data like that to a sufficiently capable AI and it'll see into your soul.
by adrian_b | 2025-08-28 14:42:46+00:00
That means pretty much "not recommended".

On the same page linked by you, Noctua explains that the green check mark means that with that cooler the CPU can run all-core intensive tasks, exactly like those used by the gmplib developers, only at the base clock, which is 4.3 GHz for 9950X, with turbo disabled in BIOS.

Only then the CPU might dissipate its nominal TDP of 170 W, instead of the 200 W that it dissipates with turbo enabled.

With "best turbo headroom", you can be certain that the CPU can run all-core intensive tasks with turbo enabled. Even if you do no overclocking, but you run all-core intensive tasks with turbo enabled, this is the kind of cooler that you need.

Noctua does not define what "medium headroom" means, but presumably it means that you can run with turbo enabled all-core tasks that have medium intensity, not maximum intensity.

There is no doubt that it is a mistake to choose such a cooler when you intend to run intensive multi-threaded computations. A better cooler, but not much bigger, like NH-U12A, has an almost double cooling capacity.

That said, there is also no doubt that AMD is guilty of at least having some bugs in their firmware or in failing to provide adequate documentation for the motherboard manufacturers that adapt the AMD firmware for their MBs.
by efficax | 2025-08-28 14:42:54+00:00
> Once they tap into that for PPC/paid ads,

If they start showing ads based on your prompts, and your history of "chats", it will erode the already shaky trust that users have in the bots. "Hallucinations" are one thing, but now you'll be asking yourself all the time: is that the best answer the llm can give me, or has it been trained to respond in ways favourable to its advertisers?
by jawns | 2025-08-28 14:43:21+00:00
We're still in the infancy of agentic AI, but I imagine that in the next few years, it's going to be more important to be able to grant an agent your credentials to perform operations on your behalf. Basically, you want the agent to be able to do all the same things you can do. But perhaps the agent doesn't live on your local device. I'm not saying that DBSC isn't beneficial, but I think we also need to be thinking of ways to grant AI agents permissions that used to be solely tied to the user's session.
by jorvi | 2025-08-28 14:43:34+00:00
> I can't stop seeing the LLM verbiage everywhere I look. I feel like once you recognize the repeated syntax that got RLHF'd into all of these models you never stop seeing it.

If you write concise but with some panache, people will think you LLMed it. I've had the accusation leveled at me with rising frequency since ~2023.

It really sucks. In a similar vein, before LLMs my friends always used to call me "the walking Wikipedia" because I tend to always have a fact or trick or trivia in my back pocket. These days more often than not, I get told "okay and now for a non-AI ass answer".

I completely understand why people have that reflexive response to it, but it also feels really vile.

For what it's worth, I do also notice it. Especially on Reddit, you'll start reading a comment and halfway through your gut feel tells you it's likely written by an LLM.
by daft_pink | 2025-08-28 14:44:04+00:00
Really looking for something we can run locally in terms of OCR LLM, I think a lot of people doing a lot of OCR and document extraction aren’t looking to upload every file into the cloud and the use is more narrow than typing into a chatbot.

While Gemini is nice, it would be nice to have a pipeline that works locally on a reasonably RAM’d unified memory Mac or Framework AMD board.
by Alex3917 | 2025-08-28 14:44:06+00:00
> I can't stop seeing the LLM verbiage everywhere I look.

emdashes have been pretty popular among net native folks for the last 20+ years, e.g. if you were to look back at the most popular Kuro5hin stories from ~2001 - 2005, you'd see them everywhere. People just aren't used to the average person being able to write well, so it looks weird to them.
by 542354234235 | 2025-08-28 14:44:07+00:00
I have to disagree. The differnce in in degree. salemanship and fraud are two different things. Painting a rosy picture of something is difference than lying about specific capabilities. Giving your production capacity using the most ambitious numbers is different than saying you can produce numbers you factually can't in any scenario. Having a future roadmap that is a goal and may not be achieved is different than promising a capability in the near future, as if it is almost ready, when there is no capability coming is lying. That's like saying a Ponzi scheme is just another investment.
by rkozik1989 | 2025-08-28 14:44:21+00:00
Like 2 years ago I did a similar thing except my goal was to sell instructions on how to see a Djinn in your dreams. Which is a pretty common thing for middle-aged Arab women to claim they can do, and they'll usually tell their husband their genie saw some awful thing they did and them blame them for it. Where most Arab men saw a problem I saw an opportunity. I tricked an LLM into writing a lucid dreaming guide which would have you see a genie in your dreams, and then combined those instructions with common hand-drawn talisman techniques used for Arab Magic to make a complete, believable product.

Not only did that product idea work but I had repeat customers. However, eventually I ran into someone who's intensity scared the absolute shit out of me, and I realized I could very easily enable an unhinged person who's capable of committing acts of violence. I talked him down and immediately thereafter faked my death so I could close the store.
by mathiaspoint | 2025-08-28 14:44:50+00:00
Personally I was expecting it to get more diverse since there are a number of companies producing the models but it seems to have converged? Are they all cheating off OpenAI Is there some fundamental linguistic reason for that?

It seems super strange to me. At the very least I thought they'd try to RL other personalities to make it harder to catch. The older base models definitely could handle that.
by nemomarx | 2025-08-28 14:45:06+00:00
Masking sucks but everyone has to hide parts of themselves in normal corporate workplaces, so it's part of life really. If you're struggling at home or going through a messy divorce, if you're stressed and anxious, if you're dealing with illness, you're supposed to keep some of that held back so it doesn't affect the 'squares' yeah
by alphazard | 2025-08-28 14:45:23+00:00
The rationalization matters far more to you than it does to your coworkers or boss. I have no opinion on how you should frame it to yourself.

However, I think it's genuinely good advice to say that professionally, people are just trying to build a mental model of how reliable you are. The reasoning doesn't really matter to them, and a psychological diagnosis is a predictive theory about how you will behave. Unfortunately, people will assume close to worst case for any condition you tell them about. The mental model you put in someone's head with a psychological diagnosis is always worse than how they currently perceive you.
by moduspol | 2025-08-28 14:45:34+00:00
This kind of presumes you're just cranking out inference non-stop 24/7 to get the estimated price, right? Or am I misreading this?

In reality, presumably they have to support fast inference even during peak usage times, but then the hardware is still sitting around off of peak times. I guess they can power them off, but that's a significant difference from paying $2/hr for an all-in IaaS provider.

I'm also not sure we should expect their costs to just be "in-line with, or cheaper than" what various hourly H100 providers charge. Those providers presumably don't have to run entire datacenters filled to the gills with these specialized GPUs. It may be a lot more expensive to do that than to run a handful of them spread among the same datacenter with your other workloads.
by stefanos82 | 2025-08-28 14:45:53+00:00
As much as I love watching theprimeagen during leisure time, personally I think he loses control out of sheer enthusiasm and instead of teaching you, which is his original intention, he just shows off with fast typing, shouting like a goofball, and bounces up and down like hyper-caffeinated person which distracts me, let alone to take him seriously.

Just watch this video https://www.youtube.com/watch?v=FknTw9bJsXM which is such an important topic, yet I have very hard time following...I prefer the format of pluralsight and the old lynda.com style of teaching.
by ekelsen | 2025-08-28 14:46:17+00:00
The math on the input tokens is definitely wrong. It claims each instance (8 GPUs) can handle 1.44 million tokens/sec of input. Let's check that out.

1.44e6 tokens/sec * 37e9 bytes/token / 3.3e12 bytes/sec/GPU = ~16,000 GPUs

And that's assuming a more likely 1 byte per parameter.

So the article is only off by a factor of at least 1,000. I didn't check any of the rest of the math, but that probably has some impact on their conclusions...
by fibers | 2025-08-28 14:46:25+00:00
The accounting note is not true in the traditional sense. The field in the US is just getting offshored to India/PH/Eastern Europe for better or for worse. There is even a big push to lower the educational requirements to attain licensure in the US (Big 4 partners want more bodies and are destroying the pipeline for US students). Audit quality will continue to suffer and public filers will issue bunk financials if they aren't properly attested to.
by Rumudiez | 2025-08-28 14:46:36+00:00
That post is all about money. The author came into someone else’s project, acts miffed that he isn’t treated as a founder right off the bat, and then complains endlessly about where the donations went. Even belaboring the “dishonesty” of rounding 28k to 30k. I won’t read to the end because clearly this person has major faults of their own and just wrote an attack without making any reflections on himself
by furyofantares | 2025-08-28 14:47:20+00:00
I really love Claude Code but it's wild to me if others aren't seeing this.

Is Ctrl+R usable at all? I've given up on it, the whole screen just starts scrolling madly most of the time. Not that I have to press Ctrl+R to get that bug to happen, it's just the most reliable way to do so.

And I've had the input box stuck not accepting input or not allowing me to delete past a certain point a hundred times. By now I know how to get it unstuck (although I couldn't tell you - my fingers figured it out but my brain doesn't know).
by itvision | 2025-08-28 14:47:20+00:00
AMD's desktop CPU TDP numbers have been misleading for over a decade.

I have no idea why they do it this way. Everything they list must be multiplied by about 1.35.

For example, a 170W TDP CPU requires 230W of dissipation. Not 170W.

AMD fans don't give a damn about that though. "It's just fine" (tm).
by AndrewKemendo | 2025-08-28 14:47:23+00:00
Too long and complex for my morning but ultimately we’re at a point of hardware/computing commodification and ubiquitous data that online RL can start to provide meaningful efficiencies across any possible real task

Here’s two good papers to start with:

https://arxiv.org/abs/2410.14606

https://storage.googleapis.com/deepmind-media/Era-of-Experie...
by kbaker | 2025-08-28 14:47:31+00:00
~~~~But your VM TPM won't be signed during manufacturing by a trusted root. No attestation.~~~~

OK I take it back, privacy is one of their specified goals:

> Note that the certificate chain for the TPM is never sent to the server. This would allow very precise device fingerprinting, contrary to our privacy goals. Servers will only be able to confirm that the browser still has access to the corresponding private key.

However I still wonder why they don't have TLS try and always create a client certificate per endpoint to proactively register on the server side? Seems like this would accomplish a similar goal?
by korhojoa | 2025-08-28 14:47:37+00:00
Based on the replies I've been seeing in this post, I'm starting to think that my banks (or I've somehow lucked out) have been very proactive in providing users with desirable features.

Instant transfers have been the default for quite a while, and possible (for a fee) for as long as I can remember.

Online payments with instant confirmation have been really easy for 15+ years.
by tux3 | 2025-08-28 14:47:43+00:00
The post echoed some similar points from Freddie DeBoer on real mental illness not always being pretty. There's limits to inclusivity that you quickly run into with schizoaffective disorder or bipolar. Companies are proudly supportive on paper, but that rarely extends to mania or psychosis.

It's a reality that most people are absolutely not equipped to deal with a coworker (or any contributor) that has manic or psychotic episodes. Mental illnesses is not anyone's fault, but there are still behaviors that will make it difficult to work with others, even for someone like Kenneth who is very good on the technical side.