Indie developer blog. Dense info, code-first, no fluff.
Verify Webhooks: Signatures, Timestamps, Tests
A webhook endpoint that trusts any POST is an open door. A 20-line HMAC verifier with a replay window, four tests that prove it, and the three mistakes that quietly break it.
jcount: A CLI for JSON Lines in 42 Lines
Most log questions are 'how many of each'. A 42-line Node script answers them from the terminal, with flags, files or stdin, and no dependencies beyond the standard library.
Shipping Solo: The Friday Checklist
With no team to catch my mistakes, I replaced judgement with a script. The Friday release script I use, what it refuses to do, and why the refusals are the useful part.
Teardown: Marrowlight's Pricing Page
A teardown of an invented log-analytics product's three-tier pricing page: what the numbers imply, where the middle plan is doing the real work, and what I'd test first.
Cron Until It Hurts, Then a Table
You don't need a message broker for the first year of background jobs. You need cron, then a jobs table, and a clear sign for when to move from one to the other.