Tootfinder

PrediQL: Automated Testing of GraphQL APIs with LLMs
Shaolun Liu, Sina Marefat, Omar Tsai, Yu Chen, Zecheng Deng, Jia Wang, Mohammad A. Tayebi
https://arxiv.org/abs/2510.10407 h…

PrediQL: Automated Testing of GraphQL APIs with LLMs
GraphQL's flexible query model and nested data dependencies expose APIs to complex, context-dependent vulnerabilities that are difficult to uncover using conventional testing tools. Existing fuzzers either rely on random payload generation or rigid mutation heuristics, failing to adapt to the dynamic structures of GraphQL schemas and responses. We present PrediQL, the first retrieval-augmented, LLM-guided fuzzer for GraphQL APIs. PrediQL combines large language model reasoning with adaptive fee…

I shrank down SwiftGodot for those that just want to expose APIs to Godot, but do not need to control Godot, and added a template that you can use to make your own:
This leverages the new "barebones" SwiftGodot work:
https://github.com/migueldeicaza/SwiftGodotAppleT…

GitHub - migueldeicaza/SwiftGodotAppleTemplate: Template project for creating Godot iOS extensions using SwiftGodot
Template project for creating Godot iOS extensions using SwiftGodot - migueldeicaza/SwiftGodotAppleTemplate

Automated Testing of Broken Authentication Vulnerabilities in Web APIs with AuthREST
Davide Corradini, Mariano Ceccato, Mohammad Ghafari
https://arxiv.org/abs/2509.10320 https:/…

Automated Testing of Broken Authentication Vulnerabilities in Web APIs with AuthREST
We present AuthREST, an open-source security testing tool targeting broken authentication, one of the most prevalent API security risks in the wild. AuthREST automatically tests web APIs for credential stuffing, password brute forcing, and unchecked token authenticity. Empirical results show that AuthREST is effective in improving web API security. Notably, it uncovered previously unknown authentication vulnerabilitiesin in four public APIs.

"[Government] launches new APIs" should be a more frequent news story, IMO.
https://www.gov.uk/government/news/hm-land-registry-launches-new-apis-to-save-customers-time

HM Land Registry launches new APIs to save customers time
The changes bring faster applications and a more reliable service for Business Gateway customers.

Where should we recommend events & community host long videos that isn't YouTube?
* Vimeo - paid, embeds work, recently acquired is a bad sign
* @archive.org - free, no embeds
* Bunny - paid, lots of options including APIs, no embeds
* Peertube - self-hosted, no embeds
Full write up in the forum https://

Boris (@bmann.ca)
Where should we recommend events & community host long videos that isn't YouTube? * Vimeo - paid, embeds work, recently acquired is a bad sign * @archive.org - free, no embeds * Bunny - paid, lots of options including APIs, no embeds * Peertube - self-hosted, no embeds Full write up in the forum

These are three arguments for web dev serv. APIs, even if you have to take a critical look at them in detail:
»Speed Comparison: Benchmarking programming languages using the Leibniz formula for calculating π«
— 2025-12-12
📊 https://niklas-heer.github.io/speed-comparison/…

We're seeing trouble with Grist on Firefox 145. Looks to be a Firefox bug. If you can hold off upgrading Firefox, do, the problem is already understood and should be fixed in their next release
https://github.com/gristlabs/grist-core/issues/1944#issuecomment-3…

JS errors on Firefox 145 · Issue #1944 · gristlabs/grist-core
Describe the current behavior Self hosted grist on docker, I have built an order management system on grist with custom widget to connect to thrid party apis. Everything have been working well befo...

LiveOIBench: Can Large Language Models Outperform Human Contestants in Informatics Olympiads?
Kaijian Zou, Aaron Xiong, Yunxiang Zhang, Frederick Zhang, Yueqi Ren, Jirong Yang, Ayoung Lee, Shitanshu Bhushan, Lu Wang
https://arxiv.org/abs/2510.09595

LiveOIBench: Can Large Language Models Outperform Human Contestants in Informatics Olympiads?
Competitive programming problems increasingly serve as valuable benchmarks to evaluate the coding capabilities of large language models (LLMs) due to their complexity and ease of verification. Yet, current coding benchmarks face limitations such as lack of exceptionally challenging problems, insufficient test case coverage, reliance on online platform APIs that limit accessibility. To address these issues, we introduce LiveOIBench, a comprehensive benchmark featuring 403 expert-curated Olympiad…

Constraint-Guided Unit Test Generation for Machine Learning Libraries
Lukas Krodinger, Altin Hajdari, Stephan Lukasczyk, Gordon Fraser
https://arxiv.org/abs/2510.09108 https://

Constraint-Guided Unit Test Generation for Machine Learning Libraries
Machine learning (ML) libraries such as PyTorch and TensorFlow are essential for a wide range of modern applications. Ensuring the correctness of ML libraries through testing is crucial. However, ML APIs often impose strict input constraints involving complex data structures such as tensors. Automated test generation tools such as Pynguin are not aware of these constraints and often create non-compliant inputs. This leads to early test failures and limited code coverage. Prior work has investig…

PyMigTool: a tool for end-to-end Python library migration
Mohayeminul Islam, Ajay Kumar Jha, May Mahmoud, Sarah Nadi
https://arxiv.org/abs/2510.08810 https://

PyMigTool: a tool for end-to-end Python library migration
Library migration is the process of replacing a library with a similar one in a software project. Manual library migration is time consuming and error prone, as it requires developers to understand the Application Programming Interfaces (API) of both libraries, map equivalent APIs, and perform the necessary code transformations. Due to the difficulty of the library migration process, most of the existing automated techniques and tooling stop at the API mapping stage or support a limited set of …