Our Blog

Autoprefixer: grid gaps set with grid-row-gap and grid-column-gap survive inheritance

A rule that inherits grid-template-areas copied the gap only from grid-gap. A gap set with grid-row-gap and grid-column-gap was lost from the -ms-grid prefixes.

Carbon: round(3600) rounds to the full hour instead of only zeroing seconds

A numeric precision in round(), floor() and ceil() means a number of seconds, but from 60 upwards it never carried into minutes, hours and days. round(3600) only zeroed the seconds.

Concourse: task file vars are interpolated before the file is parsed

A var in a non-string field such as memory: ((container_mem_limit)) failed validation, because the task file was parsed before its vars were resolved. The issue had been open since 2020.

How to build a Discord bot in Python: from the token to slash commands

You create the application, invite the bot, write slash commands in discord.py 2.7.1 and run it in a container that comes back on its own after a reboot. Our mailcheck bot has the same layout.

How to build a Minecraft server store: payment and automatic delivery

Two ways to hand over an item after payment: a command over RCON, and a queue the plugin pulls deliveries from. We show both, with what each one cannot do, on the code of our store in Flaem.

How to host an SCP: Secret Laboratory server on Linux, step by step

You install the server with SteamCMD on Debian 13 or Ubuntu 26.04, run LocalAdmin in tmux, open the UDP port, set config_gameplay.txt and submit the server for verification. Following the Northwood tech wiki, including its two traps.

ILSpy: the decompiler no longer leaves a delegate cache field behind

For _ = (Action<int>)M; ILSpy produced output with a <>O.<0>__M field that does not compile. That spot now becomes a plain delegate construction.

InPost ShipX API step by step: shipment, label and statuses

You create a locker or courier shipment, wait for the offer to be paid, download the label and receive status changes by webhook. TypeScript code on Node.js, checked against the InPost documentation and sandbox.

Installing Pterodactyl step by step: the panel, Wings and the first server

You set up the Pterodactyl 1.15 panel on Ubuntu 24.04 with PHP 8.3, MariaDB, Redis and Nginx, then a Wings node on Docker that runs the game servers. Following the official documentation, in an order that needs no fixing afterwards.

KSeF API 2.0 step by step: sending an invoice from your own system

From the KSeF token to the KSeF number and the UPO: authentication, an online session, RSA-OAEP and AES-256 encryption and sending an FA(3) invoice. Python code run against the Ministry of Finance test environment.

Monolog: RedactingFormatter now hides secrets nested in arrays

A password inside an array under a sensitive key leaked into the log when PsrLogMessageProcessor had already put it into the message. The formatter now collects every string in such an array.

Pelican Panel: updating a plugin no longer crashes

Updating a plugin in the Pelican panel died with \"Call to a member function query() on null\", because the code refreshed a model whose connection it had just reset. It now loads a fresh record.

PHPMailer: QUIT no longer ends up inside an interrupted message

When sending broke off in the middle of the DATA command, PHPMailer sent QUIT, the server took it as another line of the message and kept waiting. Now the connection is simply closed in that case.

Przelewy24 REST API: a payment from registration to verification

You register the transaction, send the customer to Przelewy24, receive the notification and confirm the payment with verify. Without verification the money never reaches you. PHP 8 code checked against the sandbox.

Software and e-commerce glossary

Short, concrete definitions of terms from software projects, each with an example from our work: KSeF, API, webhooks, PWA, hreflang, MVP and more.

Sonic: TRIGGER backup works while a store is in use

Backups in the Sonic search backend failed right after data was written, because RocksDB will not open a database that is already open in the same process. The backup now uses the open store.

vscode-neovim: visual selections no longer cut an emoji in half

A selection ending on an emoji or a character like 𝕜 stopped in the middle of a UTF-16 surrogate pair. The end of the selection now steps over the whole character.

Your first Minecraft plugin on Paper 26.3: from project to test server

You set up a Gradle project with Paper API 26.3 and Java 25, write a command and an event handler, and start a test server with one command. Following the PaperMC documentation, including what changed in 26.1.

Zed: a slow ChatGPT model catalog no longer blocks sign-in

The ChatGPT subscription model catalog can take 30 seconds to answer, while Zed waited 5 and hid the account's models. Sign-in now waits 5 seconds and the catalog finishes loading in the background.

API integration: how to connect your website, online store or admin panel to ERP, CRM, accounting and payments

Data map, webhooks, synchronisation, queues, idempotency, error handling and key security: what has to work before an integration goes into production

Connecting two systems through an API is the smaller part of the job. The bigger part is handling what happens when a webhook arrives twice, the ERP does not respond and a token expires in the middle of the night. How to design an integration that survives all of that.

How to build an MVP: the first version of your product without burning through the budget

Hypothesis, scope, priorities, the list of things put off, measuring after launch and deciding whether to extend the code or rewrite it

An MVP is not a cheaper version of the full product, it is the cheapest way to find out whether anyone needs it. How to set the scope, where to save, what not to simplify, how to measure the result and when to rewrite the code.

KSeF integration: the mandatory e-invoicing timeline and connecting your own system to API 2.0

Who issues e-invoices in KSeF and from when, what changes in the company, and how to integrate an online store, admin panel or ERP: authentication, sending and receiving invoices, limits, offline modes and QR codes

KSeF, Poland's National e-Invoicing System, has been mandatory since 1 February 2026, and from 2027 it will cover the smallest businesses too. The timeline, what changes in the company and a practical guide to integrating your own system with the KSeF API 2.0: certificates, sessions, limits, receiving invoices and fallback modes.

GDPR compliant website: forms, consent, cookies and privacy policy

Legal bases for contact forms and newsletters, a cookie banner that complies with Poland's Electronic Communications Law, analytics, third-party scripts, data processing agreements and the typical mistakes on company websites and online stores

GDPR on a website is not a checkbox under a form. How to pick the legal basis for a contact form and a newsletter, when you need cookie consent, what to do about Google Analytics, what a privacy policy must contain and who you need a data processing agreement with.

Digital accessibility for websites and online stores: WCAG 2.2, the European Accessibility Act and Polish law

Who the Polish Accessibility Act covers from 28 June 2025, what WCAG 2.2 requires in practice, and how to test and fix a site before a customer or a regulator does it for you

Since 28 June 2025, online stores and websites through which a consumer can start entering into a contract must meet accessibility requirements. Who the law covers, what WCAG 2.2 requires and how to test your site without guesswork.

Business hosting: shared, VPS, dedicated server, cloud or PaaS

Cost, performance, who administers the server and where the data lives across five hosting models, with a table of who is responsible for what

Choosing hosting is less about specs and more about deciding who will administer the server. We compare shared hosting, VPS, dedicated servers, cloud and PaaS on cost, performance, responsibility and where your data is stored.

Business website security: a checklist and a plan for when you get hacked

Updates, backups, HTTPS, security headers, forms, panel access and the first hours after a break-in, with tests you can run yourself

A small business website is usually attacked by a bot that checks for known vulnerabilities and leaked passwords, not by someone interested in the business. What to secure, how to check for yourself that it is secured, and what to do once the site has already been taken over.

WordPress vs headless CMS: which architecture to choose for a company website

Classic WordPress, a headless CMS and a static site compared on cost, security, performance and day-to-day content editing

WordPress, a headless CMS or a static site? We compare three architectures on cost over several years, security, speed and what an editor's daily work looks like, and say when each model is the wrong choice.

Core Web Vitals in practice: how we deliver 95+ in PageSpeed

Prerendering, JavaScript after the first paint, fonts without layout shift and animations in CSS. The techniques we use on our own site, with code and with their trade-offs.

A PageSpeed score and Core Web Vitals are two different numbers. We show how we measure a site before handover and which techniques keep LCP, INP and CLS in the green, including after the project has been delivered.

How much does a website cost in 2026: price ranges and what drives them

A quote broken down into hours of work, content and annual costs, so you can compare two offers for the same website

A landing page, a company website, an online store and a platform are four different purchases. We show indicative market price ranges, a sample hour-by-hour calculation and what it costs to run a website for a year.

Admin panel instead of a spreadsheet: when your business has outgrown Excel

The signs a spreadsheet is no longer enough, the situations where you are better off keeping it, and moving to a panel without losing data

How to tell that a spreadsheet costs more than it gives, what even the best-organised file cannot do, when to leave it alone and how to move the data into a panel without chaos.

Multilingual website SEO and hreflang: URL structure, translation and the mistakes that break rankings

Language or country versions, subdirectories or domains, hreflang in HTML and in the sitemap, canonical tags, localisation rather than plain translation, and a script that catches the errors

A multilingual website needs its own URL for every version, hreflang tags linking the versions together and content genuinely written in each language. We show how to choose a URL structure, how to implement hreflang with x-default, how localisation differs from translation and how to detect the typical mistakes.

Landing page vs company website: which to choose and when you need both

Five questions about your offer, your traffic source and the way customers buy that settle the choice before you pay for the wrong website

A landing page sells one thing to someone who came from an ad. A company website answers many questions for people searching on Google. We show how to choose, when a landing page does harm and how to start with one without building everything twice.

Website migration without losing Google rankings: from URL inventory to monitoring

Inventorying old URLs, a 301 redirect map, testing before the switch, changing domains in Search Console and what to watch over the following weeks

After a website rebuild, the pages that lose rankings are most often the URLs nobody added to the redirect map. We show where to get a complete list of old URLs, how to build and test 301 redirects, when to use the Change of Address tool and how to tell normal fluctuation from a mistake.

Working with a software house: how a project goes from the first message to launch

Seven stages of working with VulCode: what we do, what stays on your side and where projects most often slow down

What happens after you send the first message: the quote, onboarding in the client panel, the prototype, work on staging, testing with a buffer for fixes, code handover and monitoring after launch.

Technical SEO checklist before launch: from staging to Search Console

Indexing, robots.txt, sitemap, canonical, rendering, performance and structured data. What to check on the staging site, what on launch day and what in the first few weeks.

A new website most often loses its start in Google because of settings carried over from staging: noindex, a robots.txt block or a canonical pointing to the test domain. A technical SEO checklist with a command to verify every item.

Why we contribute to open source: what a software house gains from fixing other people's code

Fixes sent upstream to libraries, our own tools on GitHub and licences in client projects. What the company gets out of it, what the client gets and how much time it takes.

We contribute code to external open source projects and publish our own tools. Here's why a fix sent upstream to a library is cheaper than a local patch, what we don't publish and how to read a vendor's GitHub.

How to write a project brief for a software house: structure, example and common gaps

Goal, users, processes, features, data, integrations, legal requirements, budget and deadline: what a brief for a website, admin panel or app needs so that several companies quote the same project

A good brief is not a technical specification. It describes the problem, users, processes, data, integrations and constraints so that several vendors quote the same project. A structure to copy, an example and a list of common gaps.

Your own online store vs Allegro: which pays off and when to sell on both

Commissions, customer acquisition cost, buyer data and dependence on the platform's rules, worked out on a single example

Allegro brings traffic from day one and takes a commission on every order. Your own store has to win its traffic, but the customer stays with you. We work out the same product in both channels and show when each one wins.

How to read a software development quote and what to watch out for

Scope, billing model, payment schedule, rights to the code and costs outside the offer: what to check in a software house quote before you compare the figures

Two quotes for the same project are often quotes for two different projects. How to check the scope, the billing model, the rights to the code and the costs you cannot see in the offer before you pick the cheapest one.

Fixed price vs time and materials: how to choose a billing model for an IT project

A fixed price, paying for time worked, hybrid models and retainers: who carries the risk, when each model works and which contract clauses protect both sides

A fixed price shifts the risk of a bad estimate onto the contractor, time and materials onto the client, but neither model is cheaper by definition. When to choose which, how hybrid models and retainers work and what to put in the contract.

PWA vs native app: what to choose in 2026 and what a PWA still cannot do

Phone features, notifications on iPhone, app store costs and yearly requirements, laid out so that the decision follows from the feature list, not from fashion

A PWA runs from a link, updates instantly and pays no commission to the app stores. An app from a store gets Bluetooth, background work and widgets. We show what a PWA can do in 2026 on Android and iPhone, what it costs to get into the stores and when each option is the right one.

How to choose a software house: questions, red flags and the contract

Registers, portfolio, references, the first conversation and the code ownership clauses without which a contract does not protect the client

How to choose a software house when you do not know code: what to check in registers and in the portfolio, how to talk to references, which questions to ask before signing and what not to give up in the contract.

Website maintenance after launch: monitoring, fixes and upkeep for sites and apps

What only shows up under real traffic, what is worth monitoring, how to report bugs, when to deploy fixes and what the documentation needs so another team can take the project over.

Launch day is the start of the period in which a project meets real users. We describe what to watch then, how the buffer of 15% of project time for fixes works and what your options are once free monitoring ends.