Cloudflare just dropped a WordPress replacement built in two months with AI agents. LinkedIn got caught scanning your browser for 6,000+ installed programs. And a solo founder traveling through Bangkok just posted his first $100K Apple payout. Here’s what happened.
In this edition:
- Cloudflare’s EmDash wants to replace WordPress
- LinkedIn is illegally scanning your computer
- Solo dev gets $100K Apple payout, zero employees
- Builder spotlight: @cormachayden_ hits $130K MRR
- Numbers of the week
TOP STORIES
THE AI BUILT THE CMS
Cloudflare launches EmDash, a WordPress successor built in 2 months with AI
Cloudflare dropped EmDash, an open-source CMS they’re calling the “spiritual successor to WordPress.” Built in TypeScript on Astro, plugins run in sandboxed isolates instead of having full server access.
WordPress had more high-severity plugin vulnerabilities in 2025 than the previous two years combined. 96% of security issues come from plugins. EmDash’s pitch: same functionality, plugins can’t nuke your site.
Cloudflare says they built it in two months using AI agents. 650 HN comments and counting.
Why builders care: If you’re running a WordPress site for your SaaS landing page or blog, EmDash is worth watching. It’s MIT licensed, runs serverless on Cloudflare, and if it gets traction, it could become the default for new projects the way WordPress was for the last 24 years.
LINKEDIN KNOWS YOUR BROWSER SECRETS
BrowserGate: LinkedIn scans your computer for 6,000+ installed programs
Every time you visit linkedin.com, hidden code scans your computer for installed software and browser extensions. The data goes to LinkedIn’s servers and American-Israeli cybersecurity firm HUMAN Security.
The scan list grew from 461 products in 2024 to over 6,000 by February 2026. It reveals religious beliefs, political orientation, disabilities, and whether you’re secretly job hunting via 509 detected job search tools.
Hit #1 on Hacker News with 1,018 points and 474 comments.
Why builders care: If you sell browser extensions, LinkedIn is cataloging your users. If you’re a founder who uses LinkedIn for recruiting, your candidates’ extension data is being harvested. And if you’re building a privacy-focused product, the market just got more urgent.
ONE-PERSON BUSINESS, $100K CHECK
Solo founder @jayvraavi gets first $100K Apple payout with NomadTable
@jayvraavi posted a screenshot of his first $100K Apple developer payout. NomadTable has 1M+ users. No employees. No co-founders. 100% bootstrapped. He’s solo traveling through Bangkok while the app prints money.
The tweet hit 148K views, 1,575 likes, and 530 bookmarks. “2026 is the year of the one person business,” he wrote.
Why builders care: Apple payouts this size from a solo indie app are still rare enough to turn heads. NomadTable found a niche (digital nomad tools), built for iOS where users pay, and scaled without a team. The playbook is specific and repeatable.
YC STARTUP CAUGHT FORKING OPEN SOURCE
Delve allegedly took a customer’s open-source tool and sold it as their own
TechCrunch reports that YC-backed startup Delve faces allegations it violated the open-source license of its customer Sim.ai, taking their tool and passing it off as Delve’s own product. This comes on top of existing reputation problems for the startup.
The story hit 121 points on HN with 55 comments, and TechCrunch gave it full coverage.
Why builders care: Open-source licensing drama hits different when it’s a YC company doing the alleged forking. If you maintain an open-source project, this is a reminder to pick your license carefully and monitor downstream usage.
BUILDER SPOTLIGHT
FROM CREATOR ECONOMY TO $130K MRR
@cormachayden_ (Cormac Hayden) just announced Oasis crossed $130K MRR. What makes this interesting: Oasis only offers annual subscriptions. No monthly option. That means his $130K MRR is earned 12x harder since every dollar of monthly revenue required an annual commitment upfront.
The numbers: $130K MRR, annual subs only, growing a creator economy platform
Why builders care: Annual-only pricing is a bold bet most SaaS founders won’t make. Cormac’s doing it and growing. If your churn is killing you, this is the argument for forcing annual commitment. Your MRR number might be smaller but it’s real money that won’t disappear next month.
TRENDING THIS WEEK
What indie hackers are talking about right now:
🔥 Garry Tan’s code quality debate - @levelsio weighed in with 114K views: “The ‘real’ devs are gatekeeping out of fear non-coders are entering their scene.” @RhysSullivan called LLM coding “literally gambling” (713 likes). The community is split between “vibe coding is the future” and “we’re building on sand.”
🤖 Supabase vs PlanetScale: Vibe coders vs enterprise - @RhysSullivan flagged the battle between platforms catering to massive volumes of low-ROI vibe coders vs. enterprise customers. “I assume enterprise wins in the 10+ year run,” he wrote. 20K views.
🔒 Chrome extension security panic - @levelsio’s thread on Chrome extension malware (596 bookmarks) led to him building his own extensions with Claude Code. “I’ll just vibe code all my Chrome extensions to avoid being dependent on someone getting bribed to add malware.” 217K views.
DRAMA CORNER
GARRY’S CODE, EVERYONE’S OPINIONS
YC CEO’s vibe-coded project sparks the code quality wars
Garry Tan shared his Claude Code setup “gstack” publicly. Critics called it “a bunch of prompts in a text file.” Supporters called it the future of CEO-as-developer. @levelsio defended Tan with 114K views: “I’ve been shamed so many times for using PHP and jQuery in 2026… but it’s all worked out fine.” @RhysSullivan responded with measured takes across multiple tweets, landing on “the code is slop obviously, but the site works.”
Why builders care: The vibe coding debate isn’t going away. Whether you’re a “proper” developer or a prompt engineer shipping products, the market doesn’t care how you build. It cares if the thing works and people pay for it.
BOOKMARKED THIS WEEK
Reads, tools, and resources worth saving:
📌 @coreyganim: AI content agency playbook - “Pick a niche, use Claude for research, build content systems, charge $3-5K/mo per client.” 488K views, 7,963 bookmarks. Highest-bookmarked indie hacker tweet this week by a mile.
📌 @coreyganim: DESIGN.md monetization - Sell AI website kits for $97-197, upsell “done with you” at $497, retainer at $297/mo. 1,178 bookmarks on the thread.
📌 @levelsio: Vibe code your own Chrome extensions - Built an open-source XDR Boost app for MacOS in 5 minutes with Claude Code to replace a buggy paid alternative. 623 bookmarks. github.com/levelsio/xdr-boost
NUMBERS OF THE WEEK
- $130K MRR — @cormachayden_’s Oasis, annual subs only, creator economy
- $30M ARR — @vitaliidodonov’s main business, 80K creators, started coding at 20
- $90K MRR — @helloitsolly’s Senja, 100% bootstrapped, just hired first engineer
- $2M ARR — @itsumeshk’s Runable, hit milestone 3 weeks after launching 2.0
Curated by AI, built by a human. Made with Claude. Get this daily: indiehacker.news | X | Telegram