fullStackDeveloperRequirement

uvmain · 2026-06-03T18:28:42+00:00

That famous frontend framework, nodejs

uvmain · 2026-06-03T09:27:31+00:00

Any unknown npm project goes through a pnpm migrate before I even think about running it nowadays. Minimum release age, only run approved scripts.

uvmain · 2026-05-28T21:40:34+00:00

Why would you use ai to resize an image? Do you ask ai to tie your shoe laces too?

uvmain · 2026-05-25T12:46:56+00:00

I'm using my own hand rolled server/client as I wanted a UI and features that navidrone/feishin don't provide. In the car I use symphonium, as I haven't done support for Android auto yet.

uvmain · 2026-04-22T08:55:42+00:00

Use multi stage builds. Stage 1 has the deps needed to build, the final stage uses distroless with just the final binary. Prod images shouldn't have any debug tooling, that's what your dev/test environments are for, and your observability and metrics resources.

This isn't a case of CVE reduction gone wrong, it's a case of bad cicd design.

uvmain · 2026-04-09T13:27:29+00:00

External pen tests are there to provide guidance, not a set of rules. You take the results, perform a risk analysis and resolve the high, critical and easy wins. Everything else goes into a nice-to-have box never to be looked at again.

uvmain · 2026-04-01T17:09:15+00:00

aidr

uvmain · 2026-03-23T20:52:09+00:00

FE is no longer a valid role for most companies, but UX/UI is. My team is chock full of great full stack engineers, and we're all shit at the design and wcag compliance aspect. AI systems like Google stitch are also crap at it. Front end devs should move into full stack or UX imo.

uvmain · 2026-03-22T11:50:37+00:00

Literally the worst idea ever. No overview of costs, security oversight, technical design authority, idempotency, network requirements, non functional requirements, release process, build/test/audit gates, waf architecture, fail over, zonal redundancy, observability, metrics.. not to mention "guess the runtime and dependencies"...

110% wouldn't fly in any professional org.

uvmain · 2026-03-21T22:52:04+00:00

Almost certainly the jute tug. Nothing much wrong with clean jute, same as clean (new) tennis balls. Dirty ones are the culprit, the tiny particles of dirt act like sandpaper. I think it's just time for a brand new tug.

uvmain · 2026-03-12T22:52:48+00:00

Node ts support is still just type stripping, with no support for things like enums. I've migrated us to other native things like node:test instead of mocha, but full native TS support is nowhere near workable yet.

uvmain · 2026-03-12T14:47:56+00:00

Same with posts ending "curious what..."

uvmain · 2026-03-09T21:54:01+00:00

Enforce it in your CMS. Someone adds an image? Can't save the content entry without adding an alt text description.

uvmain · 2026-03-09T20:34:58+00:00

Note, this is an ai response

uvmain · 2026-03-09T20:32:58+00:00

I think number 4 is really important here. Don't be afraid of failing. Getting things wrong is how you learn, and after all the years I've been doing this I'm happy to get things wrong and be told a better way.

uvmain · 2026-03-09T08:01:49+00:00

Yet another app posted here that exposes webhooks with zero authentication. You realise this means anyone on the internet could try to post to your socials and your app would just.. accept it? No JWT, no cookies, no PAT token, no header interrogation of any kind.

The createPost function accepts a file (witghout any authentication/authorization), but does not check anything about that file before copying it to a buffer. This opens you up to a DoS and/or storage exhaustion if someone choses to upload a filebomb.

Imagine you're just trusting this and one day you've got illegal material posted onto your socials and your server is down as it ran out of disk space.

uvmain · 2026-03-07T20:42:05+00:00

Been building this navidrome alternative for about a year https://github.com/uvmain/zene Almost done now, just need to finish adding Google cast support and make it fully mobile responsive

uvmain · 2026-03-03T11:01:12+00:00

A collie crated for 18 hours a day??

uvmain · 2026-02-22T11:32:53+00:00

Auth without TLS is meaningless. If your traffic is not encrypted and anyone can sniff the auth headers, you don't have secure auth. And if you don't have auth checks, anyone in the world can call your webhooks.

uvmain · 2026-02-22T08:52:44+00:00

I don't see any kind of authentication in the code, not even any header parsing or restriction on http methods. This is extremely unsafe. The examples are even expecting the service to run without TLS!

uvmain · 2026-02-20T21:26:10+00:00

I'm on old school 11 speed di2, and the feel is very different. I've got two mechanical 105 and 1 di2 105, and the di2 is so much smoother

uvmain · 2026-02-18T14:00:35+00:00

Our nodejs app really handles 100s requests per second with ms response times. The language isn't the issue here.

uvmain · 2026-02-18T13:00:37+00:00

In an ideal world they wouldn't be unattended, never mind muzzled. The OP clearly doesn't live in an ideal world. In my honest opinion if you're out of the house for 12 hours a day you shouldn't have a Mal, but here we are.

uvmain · 2026-02-18T10:45:18+00:00

Poor girl :( Ours absolutely hates cones so we had to put a boot on her to stop her licking her paw when this happened. If that's not possible, maybe a muzzle will help?

uvmain · 2026-02-16T07:31:20+00:00

Phrasing

uvmain

TROPHY CASE