Changelog

Started publishing articles on learning to code alongside AI, problem decomposition, and which languages and tools are actually worth learning right now. New posts land regularly.

Our database provider also exposes a separate public REST API layer, independent of the app itself. We audited it, found it reachable with broader access than intended, and shut it off entirely — codeseed.app has never used it directly.

Patched vulnerable dependencies, stopped forwarding raw database errors to error tracking, made claim updates atomic, added idempotency to PR review webhooks, and closed a race condition in step reviews.

Improved keyboard navigation, added missing ARIA labels and roles, and fixed focus states across the catalog, filters, and claim flow.

Added canonical URLs, structured data, and a machine-readable site summary so codeseed.app is easier to find, index, and cite correctly.

Links to codeseed.app shared on social media were rendering a broken preview image instead of the site card. Fixed.

Added well over a hundred new project ideas across all five languages and every category, generated and reviewed through our AI pipeline.

Reviews used to run automatically on every push. You now trigger a review when you're ready, so feedback arrives when you actually want it.

When your implementation matches something we've already verified for another learner, review now returns near-instantly instead of re-running the full check.

Added a web app manifest, so codeseed.app can be installed like a native app on desktop and mobile.

Replaced the text-based logo with a proper SVG wordmark, updated across the navbar, onboarding, favicon, and social-share image.

Projects you've favorited now show up directly in the account dropdown, with clearer filter labels on Explore.

Fixed a bug where the AI step reviewer incorrectly reported files that were already present in the repository.

Stuck on a claimed project? You can now abandon it from your dashboard so another learner can pick it up, or come back to it later.

Previously, deleting your codeseed.app account left the provisioned GitHub repository behind. Deletion now cleans up the repo along with the GitHub App's access.

Added rate limiting across public endpoints and made GitHub webhook processing idempotent, so a redelivered event can't create duplicate records.

Every submitted project idea now passes a deterministic safety check before publishing, on top of mentor review.

Fixed an issue where certain project content could execute script in the browser, and added stronger guards against prompt injection in AI-generated content.

codeseed.app is live. Sign in with GitHub, browse real projects, claim one for your stack, and get AI-verified step by step — with human mentor review on projects that have one. All for free.

Replaced the dark palette with a warm ivory theme. New typography pair: Fraunces for headings, Plus Jakarta Sans for body. Every page got a layout pass — homepage, project page, navbar, cards.

Steps are now shown as a visual timeline with numbered circles and a connecting rule. A sticky sidebar shows the claim CTA, mentor info, and tech stack at all times.

Our application servers now run on Hetzner infrastructure, with our database managed by Supabase and accessed via Drizzle ORM. Authentication now runs on Better Auth with GitHub OAuth — giving us full control over sessions and tokens.

New transactional email notifications: a welcome email is sent when you create your account, and a confirmation email is sent when you delete it.

Upgraded Next.js to 16.2.6 (patches 13 CVEs). Added security headers: Content-Security-Policy, HSTS, X-Frame-Options, and Permissions-Policy. Rate limiting on the messaging API (30 requests/min per IP). Timing-safe comparison for CRON_SECRET. Input length validation on all public endpoints. Fixed an open redirect in the auth callback.

Mentors can now mark a learner's current step as complete directly from the claim page, advancing them to the next project step without requiring a PR merge.

Deleting your account from Settings no longer returns a 500 error. The root cause was Better Auth's deleteUser not supporting GitHub OAuth-only accounts. Fixed by deleting the auth record directly, with cascading cleanup of sessions and linked accounts.

Learners can now ask codeseed.app to verify their progress after each step. Our AI checks the current implementation against what that step requires and shows a pass/fail with feedback directly in the app.

A notification bell in the navbar shows unread alerts for PR reviews, mentor messages, and claim updates. Notifications are fetched in real-time and marked as read on open.

Fixed an edge case where webhook events were dropped when the repo was forked before the GitHub App installation completed. Events are now queued and retried.

Mentors now have a dedicated dashboard listing all their active learners, each learner's current step, commit count, and any open PRs awaiting review — all in one place.

Learners and mentors can now exchange messages directly inside a claim, without leaving the platform.

The Explore page now has sidebar filters. Filter projects by programming language, difficulty level, or category (web, mobile, backend, CLI, AI, devops) with instant results.

Platform mentors can now trigger AI-generated project ideas for any language and difficulty. Each idea publishes automatically once generated.

Projects are now tagged with a category: web, mobile, backend, CLI, AI, or devops. Categories appear on project cards and the Explore page.

The dashboard now shows step-by-step progress for each active project, commit count synced from GitHub, and the current AI review status.

Fixed a bug where users with an expired Supabase session were redirected to the homepage in an infinite loop instead of being prompted to log in again.

Claiming a project automatically creates a private GitHub repository for you via the codeseed.app GitHub App, so you can start coding immediately.

Experienced developers can submit project ideas — with steps, resources, and a recommended tech stack — for learners to claim and build.