Drupal & Tech Articles by Metadrop

Engineering knowledge from real Drupal projects

Everything published here comes from production work: the contributed modules we maintain on drupal.org, the migrations, upgrades, and audits we deliver for enterprise clients, and the tooling we build to raise quality on every project. We document what we learn so your team can apply it.

Topics we write about regularly:

Drupal development — architecture, contributed modules, upgrades, migrations, and performance
AI and automation — practical AI integrations in Drupal, LLM tooling, and editorial workflows
Web accessibility — WCAG compliance and the European Accessibility Act
DevOps and infrastructure — hosting, CI/CD, local environments, and platform migrations
Software quality — testing strategy, Behat, PHPUnit, and QA tooling

18 March, 2025
Metadrop February 2025: Security reinforcements, dark mode expansion & Open Source innovation
A roundup of our latest work to help you build better Drupal sites, February, 2025.
- Jorge Tutor
- Ricardo Sanz
25 July, 2017
Maintaining Drupal: when to update core and modules
Quick guide for identifying when should the Drupal core and its modules be updated.
- Jorge Tutor
25 September, 2024
Improving headers in a Drupal site using Dries' HTTP Header Analyzer
How we got 10/10 in the Dries' HTTP Header Analyzer tool.
- Ricardo Sanz
10 September, 2025
NPM compromised: you are probably not at risk
NPM has been compromised, what are the real risks?
- Ricardo Sanz
18 September, 2024
Safe browsing the Internet and the birthday party analogy
HTTP security headers are a security measure that almost nobody uses but they are extremely powerful (and annoying to configure).
- Ricardo Sanz
17 February, 2026
Managing Drupal Status Report requirements
Drupal's status report often shows warnings that clutter your admin interface. We built Requirements Manager to hide or modify these requirements through a simple UI instead of writing custom code for every project.
- Eduardo Morales
- Jorge Tutor
21 October, 2024
oEmbed resources from a custom domain in Drupal
In 2018, Drupal added support for oEmbed in media and the ability to serve them from a subdomain to improve security against XSS attacks. Although the resources are displayed in iframes, doing so under the same domain can be insecure...
- Fran Rouco
- Luis Ruiz
11 February, 2025
Metadrop monthly update: new Drupal modules, improvements & contributions
A roundup of our latest work to help you build better Drupal sites
- Jorge Tutor
17 June, 2025
Metadrop April 2025: new releases for Drupal ecosystem, privacy and content editorial experience
Highlights from April: privacy, new releases in Drupal ecosystem, research on IA capabilities, helping clients and more.
- Ricardo Sanz
2 June, 2020
Embedding things using its URL and oEmbed
oEmbed is a format that allows embedding of a properly represented URL. This means rendered in a way that is useful to the visitor. Even clearer: it allows to include things like tweets, video from different providers, Flickr albums and...
- Ricardo Sanz

RSS

Don't lose anything

Subscribe to our RSS

Expert Drupal & Tech Articles

Engineering knowledge from real Drupal projects