Drupal 12 is scheduled for the week of 7 December 2026, and Drupal 10 reaches end of life on 9 December 2026. Both dates sit on the same page of the Drupal core release schedule, two lines apart, and most people running a Drupal 10 site have noticed neither. The first alpha of the new major was tagged on 2 September...
Software Development
Articles, guides and tutorials on software development, covering methodologies, tools, languages and best practices for building production-grade software.
A salesforce integration almost never fails on protocol. Authenticating is a solved problem and posting a record is a solved problem. What ends projects is the daily request allocation and the shape of the data model, both usually discovered about three weeks after go-live, when the nightly job starts returning errors...
Most WordPress plugin development follows the same arc. Somebody needs a booking form, a feed importer or an extra field at checkout, a developer writes it, it works, everyone moves on. Two years later the site is stuck on an old version of WordPress because nobody is confident that plugin will survive an update, and...
A CMS migration is one of the few projects where the technical work can go perfectly and the outcome still be a disaster. The site launches on time, looks better, loads faster, and traffic falls by half, because a few hundred URLs changed shape and nobody built the map. The traffic loss is not caused by the new...
A postmortem is easy to hold and hard to make useful. The meeting happens, a document is written, four action items are recorded, and six months later the same failure occurs and somebody finds the old document while searching for something else. The word “blameless” gets most of the attention in discussions of this,...
Password storage is one of the few areas in software with a genuine right answer, published, maintained and free. It is also one of the most consistently got wrong, because the wrong answers were correct at some point and nobody revisited them. The failure is rarely exotic. It is a system built in 2016 against advice...
Supply chain security sounds like a problem for organisations with a security function, and the framing is misleading. A small team running a handful of services typically depends on hundreds of packages it has never read, pulled at build time from registries it does not control, executing installation scripts on...
Technical documentation fails in a specific and predictable way. Somebody writes a great deal of it during a quiet fortnight, the system changes, nobody updates it, and within a year the document is confidently wrong. At that point it is worse than nothing, because a reader who trusts it acts on information that no...
Developer onboarding is usually measured in how long the induction takes, which is the wrong end of the problem. The number that matters is how long before a new engineer can change something and be confident they have not broken anything else, and in most teams that is measured in months rather than days. The delay is...
Software escrow exists to answer a reasonable fear: the supplier who built and runs your critical system goes out of business, and you are left with something you depend on and cannot maintain. An escrow agreement puts the source code with a third party who releases it to you if that happens. The fear is legitimate....