All Posts
Hackerstack
Indie developer blog. Dense info, code-first, no fluff.
webhooks
Verify Webhooks: Signatures, Timestamps, Tests
A webhook endpoint that trusts any POST is an open door. A 20-line HMAC verifier with a replay window, four tests that prove it, and the three mistakes that quietly break it.
cli
jcount: A CLI for JSON Lines in 42 Lines
Most log questions are 'how many of each'. A 42-line Node script answers them from the terminal, with flags, files or stdin, and no dependencies beyond the standard library.
shipping
Shipping Solo: The Friday Checklist
With no team to catch my mistakes, I replaced judgement with a script. The Friday release script I use, what it refuses to do, and why the refusals are the useful part.
pricing
Teardown: Marrowlight's Pricing Page
A teardown of an invented log-analytics product's three-tier pricing page: what the numbers imply, where the middle plan is doing the real work, and what I'd test first.
cron
Cron Until It Hurts, Then a Table
You don't need a message broker for the first year of background jobs. You need cron, then a jobs table, and a clear sign for when to move from one to the other.
sqlite
SQLite in Production, Honestly
I run a paying product on one SQLite file. Here is what that is good for, the one limit you will hit, and a 20-second experiment that shows exactly how the limit behaves.