Recent Blog Posts
Insights on AI Agents, Modern Web, and the Future of Engineering.
Secure Web Apps: CSRF, XSS, and CSP in 2026
CSRF, XSS, and CSP through the lens of the OWASP Top 10 2025: synchronizer tokens, SameSite, context-aware encoding, Trusted Types, and a nonce-based Content Security Policy that actually ships.
Testing Your Frontend: Vitest, Playwright, and Visual Regressions
A leveled-up frontend test strategy for 2026: unit and component tests in Vitest 4, end-to-end flows in Playwright, and pixel-comparison visual regressions — with a CI-ready workflow.
GraphQL Federation at Scale
Splitting one GraphQL API into composable subgraphs with Apollo Federation v2. Entities, @key directives, reference resolvers, supergraph composition, and batching entity lookups so queries stay fast as teams multiply.
Deno: A Modern Runtime for Server-Side JavaScript
Deno 2 in production: the secure-by-default permission model, native TypeScript, the npm and JSR ecosystems, std modules, and the web-standard APIs that make server code boring to write.
Real-Time Collaboration with CRDTs
How conflict-free replicated data types converge without a central authority: the YATA algorithm, Yjs shared types, update exchange, awareness, and a runnable collaborative editor.
WebGPU for the Browser: GPU Compute with JavaScript
A practical introduction to WebGPU GPU compute: adapters, devices, WGSL shaders, compute pipelines, and running data-parallel workloads in the browser with JavaScript.
State Management in 2026: Signals, Stores, and Fine-Grained Reactivity
Why signals became the default reactive primitive in 2026, where the TC39 signals proposal stands, and when a store still beats a computed. Preact Signals, React Compiler, and Zustand side by side.
CI/CD for the Web: A GitHub Actions Masterclass
From first workflow to production: triggers, jobs, caching, matrices, reusable workflows, environments, and the security hardening that keeps GitHub Actions pipelines safe in 2026.
Monorepos with pnpm, Turborepo, and Nx
A practical tour of the 2026 monorepo stack: pnpm workspaces for dependency management, Turborepo for task caching, and Nx when you outgrow it. Covers workspace:*, catalogs, remote caching, affected-only CI, and module federation.
Streaming SSR, Islands, and the New Rendering Paradigm
How React Server Components, Suspense streaming, and islands architecture replaced monolithic hydration — and how to compose static shells, streamed regions, and interactive islands in one page.
Building a Mobile AI Chat App End-to-End
From backend proxy to streaming UI: the full architecture for a production Flutter AI chat app — API key security, token streaming, state management, and cost control.
On-Device AI in Flutter with Gemini Nano and GenKit
How to run Gemini Nano on-device inside a Flutter app — via ML Kit GenAI and the AICore system service — with capability gating, model fallback, and a hybrid local/cloud strategy.