惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

N
News and Events Feed by Topic
S
Security @ Cisco Blogs
S
Secure Thoughts
Attack and Defense Labs
Attack and Defense Labs
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
Hacker News - Newest:
Hacker News - Newest: "LLM"
Recent Commits to openclaw:main
Recent Commits to openclaw:main
H
Hacker News: Front Page
博客园 - 叶小钗
H
Heimdal Security Blog
Microsoft Security Blog
Microsoft Security Blog
Forbes - Security
Forbes - Security
AI
AI
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
T
Troy Hunt's Blog
罗磊的独立博客
Application and Cybersecurity Blog
Application and Cybersecurity Blog
爱范儿
爱范儿
GbyAI
GbyAI
The Last Watchdog
The Last Watchdog
TaoSecurity Blog
TaoSecurity Blog
C
CXSECURITY Database RSS Feed - CXSecurity.com
D
DataBreaches.Net
Recent Announcements
Recent Announcements
Schneier on Security
Schneier on Security
C
Cisco Blogs
美团技术团队
D
Docker
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
WordPress大学
WordPress大学
月光博客
月光博客
雷峰网
雷峰网
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
H
Hackread – Cybersecurity News, Data Breaches, AI and More
A
Arctic Wolf
B
Blog RSS Feed
Cisco Talos Blog
Cisco Talos Blog
C
Cybersecurity and Infrastructure Security Agency CISA
V
Vulnerabilities – Threatpost
V2EX - 技术
V2EX - 技术
Y
Y Combinator Blog
N
News and Events Feed by Topic
www.infosecurity-magazine.com
www.infosecurity-magazine.com
W
WeLiveSecurity
Security Archives - TechRepublic
Security Archives - TechRepublic
G
GRAHAM CLULEY
Jina AI
Jina AI
Hugging Face - Blog
Hugging Face - Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
The Hacker News
The Hacker News

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
I Built AdaptiveKit to Give Any Web App a UI That Learns From the People Using It
Om Rajguru · 2026-05-04 · via DEV Community

Most B2B web apps ship with a fixed layout. Every user who logs in sees the exact same blocks in the exact same order, whether those blocks are relevant to their workflow or completely invisible to how they actually use the product. The analytics widget that one user opens every morning sits in the same position as it does for the user who has never touched it. That felt like a solvable problem to me, and I wanted to solve it at the component level, not the content level. Most personalization tools on the market operate by swapping which data gets shown. AdaptiveKit operates by learning which UI blocks each individual user engages with most and reordering those blocks accordingly. I built it to install in under ten minutes, ship as code you own completely, and route all data through your own server with nothing leaving your stack.

AdaptiveKit is three npm packages that work together across two environments. The first package is a CLI tool, meaning a command-line program you run once from your terminal, that walks every component file in your project and attaches a stable tracking identifier to each container element it finds. A container element is an HTML tag like a div, section, article, or aside that wraps a meaningful block of content. The CLI writes these identifiers as attributes directly into your source code and records a map of every identifier back to its source component in a manifest file. The second package is a browser SDK, a small JavaScript library weighing 3 KB, that attaches to those tagged elements and watches how each user interacts with them: what they scroll past, what they click, and how long they look at something before moving on. The third package is a scoring engine that runs on your server, reads those interaction events, and produces a ranked list of block identifiers ordered by how much each individual user has engaged with each block. You apply that ranked list to your layout however your design system allows.

The CLI step is a one-time setup. You run one command, it parses every JSX and TypeScript file in your project, finds the container elements, and injects a deterministic identifier onto each one. Deterministic means the same element always generates the same identifier across different machines and across re-runs, because the identifier is derived from the file path, the component name, the element type, and its position within that component rather than from a random value. Adding new components or new elements to existing components generates new identifiers for those additions and leaves every existing identifier untouched. The only situation where existing identifiers change is when a component is renamed, which is correct behavior: a renamed component is a genuinely new component and should be treated as one. After the CLI runs, you commit the modified source files and the manifest to your repository, and those identifiers become a stable part of your codebase going forward.

The browser SDK initializes in your root layout component with two required values: the current user's ID and a callback function that fires every time an interaction event occurs. An interaction event is a data object describing one moment of engagement, containing the block identifier, the user ID, the type of interaction (a view, a click, or a dwell), and a timestamp. A dwell event fires when a user looked at a block for at least two seconds before it left their viewport, which is a stronger signal of interest than a view that registered as the user scrolled past. The callback function is where you route the event to your own server. The SDK fires it in a fire-and-forget manner so a slow network call has zero effect on the UI. The SDK uses browser APIs that are available in every modern browser, has zero external dependencies, and guards every environment-specific call so it renders safely on the server without throwing errors.

On the server side, you create two API routes. The first route receives the interaction events, loads the current user's stored scoring state from whatever database you use, feeds the new event into the scoring engine, and writes the updated state back to storage. The scoring state is a plain JSON object, meaning a straightforward data format that any database can store, containing a running score per block per user. The engine uses a decay-weighted formula to compute each score, where decay means older interactions contribute less to the final number than recent ones. A block clicked yesterday outweighs a block clicked three months ago. This keeps the ranking responsive to how a user's habits actually change over time rather than being permanently shaped by their behavior on day one. The second route reads the stored state and returns a ranked array of block identifiers, ordered from highest score to lowest, which your frontend component receives and applies to the layout.

The ranking applies to your layout through whichever mechanism your design system already supports. For a flex column layout, you set the CSS order property on each block using the position of its identifier in the ranked array, and the browser reorders the blocks visually with zero conditional rendering required. For slot-based layouts, you sort the array of blocks before rendering. For grid layouts, you use the grid-row property. AdaptiveKit takes no opinion on this step because every project's layout system is different, and the ranking is a plain array of strings that works with any approach. For users who have no interaction history yet, the engine returns an empty array, and you fall back to whatever default order your app would have shipped with before AdaptiveKit existed. The personalization activates the moment a user starts engaging, and it strengthens with every subsequent session.

I built the security and privacy model into the architecture from the first design decision. All interaction data routes through your own server. The AdaptiveKit cloud does not exist. There is no third-party recipient for any of the engagement events the SDK collects. The events contain block identifiers, user IDs, interaction types, and timestamps. They contain zero personally identifiable information, zero IP addresses, and zero content from the page. Deleting a user's personalization data requires two calls: one to reset their state inside the engine and one to delete the stored JSON from your database. That deletion path integrates directly into the same code path that deletes a user's account, which is the correct place for it. The three packages together add up to under 8 KB of browser-side code, and the server-side engine runs in any Node-compatible environment including edge runtimes and serverless functions.

I published AdaptiveKit as version 1.0 with all three packages available on npm today. The full source is on GitHub and the codebase is small enough to read in an afternoon. I built it to solve a real problem I kept running into across different products: fixed layouts that treat every user identically regardless of how differently each person actually uses the interface. The scoring engine returns results in under 5 milliseconds for a user with a thousand ingested events across fifty blocks, so the ranking adds no perceptible latency to the layout render. The roadmap includes a first-class React hook, a Vue composable, and cohort scoring for bootstrapping new users with a shared starting ranking based on how similar users behave. If you build with it, find a gap, or want to extend it, the repository is open and pull requests are welcome.