Engineering guides
Backend systems, Node.js, TypeScript, AI coding, fintech infrastructure, and engineering career proof.
Latest posts
Page 11 of 18Use Codex as an agent provider in JetBrains IDEs
Set up Codex as an agent provider in JetBrains IDEs, understand preview requirements, choose permissions, and verify changes safely.
Copilot usage API review cycles: measure AI adoption without bad metrics
Interpret Copilot usage API review-cycle and time-to-review metrics, avoid false productivity claims, and build a balanced engineering report.
Fix GitHub pull request merge conflicts with Copilot on mobile
Understand GitHub Mobile’s Copilot merge-conflict workflow, when it is safe, what to review, and when to return to a full development environment.
actions/setup-java v5.5 signature verification: secure JDK setup
Use actions/setup-java v5.5 signature verification, pin workflow dependencies, test Maven changes, and reduce JDK supply-chain risk.
Deploy managed GitHub Copilot settings with MDM safely
Deploy organization-managed Copilot settings through MDM or files, test precedence, protect developer workflows, and prepare rollback.
GitHub Copilot OpenTelemetry export for VS Code and CLI explained
Understand enterprise-managed OpenTelemetry export for Copilot, choose useful signals, protect prompt data, and validate an approved collector.
GitHub innersource security advisories: private vulnerability workflow
Set up GitHub innersource security advisories for privately shared code, coordinated fixes, affected repositories, and controlled disclosure.
GitHub Copilot repository overview: use it without trusting it blindly
Use Copilot repository overviews to enter unfamiliar codebases faster while verifying architecture, commands, ownership, and security assumptions.
GitHub Code Quality organization targeting: a safe rollout plan
Roll out GitHub Code Quality at the organization level with repository targeting, baseline checks, ownership, and measurable adoption.
GitHub pull requests dashboard: filters and saved views that matter
Use GitHub’s new pull requests dashboard to organize reviews, CI failures, merge-ready work, and cross-repository searches without tab overload.
GitHub secret scanning detector names explained: patterns vs AI detection
Understand GitHub’s renamed secret scanning detector types, how pattern and AI detection differ, and how to triage each alert correctly.
CodeQL AI prompt injection detection: what the new query catches
Learn how CodeQL detects untrusted data flowing into AI system prompts, where the query helps, and what developers still need to review manually.
Node.js 26 readFile caller-supplied buffers: when it helps
Understand Node.js 26.4 caller-supplied readFile buffers, possible allocation benefits, buffer sizing risks, and how to benchmark the change.
Node.js node:vfs explained: what the new virtual filesystem can do
A cautious introduction to Node.js 26.4 node:vfs, mounted virtual filesystems, fs/promises dispatch, testing opportunities, and stability concerns.
Node.js 26 package maps explained: a new loader capability
Understand Node.js 26.4 package maps, how they differ from package imports and exports, and why production teams should treat them as experimental.
RegExp.escape in TypeScript 6: safely building regular expressions
Use the new RegExp.escape type support in TypeScript 6 to safely insert user text into regular expressions without changing pattern meaning.
TypeScript 6 Temporal types: typing Node.js 26 date and time code
Use TypeScript 6 Temporal types with Node.js 26, configure the right lib, and avoid confusing type availability with runtime support.
TypeScript 6 allows Bundler resolution with CommonJS: when to use it
Understand TypeScript 6 support for moduleResolution Bundler with CommonJS output and decide whether it matches your build pipeline.
TypeScript 6 supports #/ subpath imports: package imports explained
Use TypeScript 6 support for #/ package subpath imports, align package.json imports, and avoid aliases that work only in the editor.
TypeScript 6 stableTypeOrdering: reproducible declaration output explained
Understand TypeScript 6 stableTypeOrdering, when deterministic union and intersection ordering matters, and its performance tradeoff.
TypeScript 6 deprecates moduleResolution node: migrate from node10 safely
Move from deprecated moduleResolution node/node10 to NodeNext or Bundler without creating package exports and file-extension bugs.
TypeScript 6 baseUrl deprecation: migrate path aliases safely
Fix the TypeScript 6 baseUrl deprecation with before-and-after tsconfig examples, then verify aliases in Node, bundlers, tests, and declaration output.
TypeScript 6 target es2025 default: should you set target explicitly?
Decide whether to accept TypeScript 6’s floating ES2025 target or pin a JavaScript target for Node, browsers, libraries, and reproducible builds.
TypeScript 6 module defaults to esnext: CommonJS migration checklist
Understand the TypeScript 6 module default change and keep CommonJS projects aligned with package.json, Node, and emitted JavaScript.
TypeScript 6 strict true by default: what breaks and how to upgrade
Prepare for TypeScript 6 strict mode becoming the default, find newly unsafe paths, and migrate without disabling useful checks globally.
TypeScript 6 types defaults to empty: fixing missing Node globals
Fix missing process, Buffer, and Node module types after TypeScript 6 by declaring the runtime type packages your project actually uses.
TypeScript 6 rootDir default change: why dist/src suddenly appears
Fix TypeScript 6 output moving into dist/src by setting rootDir explicitly and checking files included outside the source directory.
npm 2FA-bypass token deprecation: how automated publishing should migrate
Prepare npm publishing automation for 2FA-bypass token restrictions by moving to trusted publishing or staged human approval.
npm approve-scripts workflow for teams upgrading to npm 12
A practical team workflow for reviewing npm lifecycle scripts, committing approvals, testing CI, and avoiding blanket trust.
npm 12 allow-remote explained for URL and tarball dependencies
Understand npm 12 allow-remote, identify remote tarball dependencies, and migrate URL-based installs to safer reproducible packages.