Engineering guides
Backend systems, Node.js, TypeScript, AI coding, fintech infrastructure, and engineering career proof.
Back to engineering guidesLatest posts
Page 7 of 14TypeScript 6 allows Bundler resolution with CommonJS: when to use it
Understand TypeScript 6 support for moduleResolution Bundler with CommonJS output and decide whether it matches your build pipeline.
TypeScript 6 supports #/ subpath imports: package imports explained
Use TypeScript 6 support for #/ package subpath imports, align package.json imports, and avoid aliases that work only in the editor.
TypeScript 6 stableTypeOrdering: reproducible declaration output explained
Understand TypeScript 6 stableTypeOrdering, when deterministic union and intersection ordering matters, and its performance tradeoff.
TypeScript 6 deprecates moduleResolution node: migrate from node10 safely
Move from deprecated moduleResolution node/node10 to NodeNext or Bundler without creating package exports and file-extension bugs.
TypeScript 6 baseUrl deprecation: migrate path aliases safely
Fix the TypeScript 6 baseUrl deprecation with before-and-after tsconfig examples, then verify aliases in Node, bundlers, tests, and declaration output.
TypeScript 6 target es2025 default: should you set target explicitly?
Decide whether to accept TypeScript 6’s floating ES2025 target or pin a JavaScript target for Node, browsers, libraries, and reproducible builds.
TypeScript 6 module defaults to esnext: CommonJS migration checklist
Understand the TypeScript 6 module default change and keep CommonJS projects aligned with package.json, Node, and emitted JavaScript.
TypeScript 6 strict true by default: what breaks and how to upgrade
Prepare for TypeScript 6 strict mode becoming the default, find newly unsafe paths, and migrate without disabling useful checks globally.
TypeScript 6 types defaults to empty: fixing missing Node globals
Fix missing process, Buffer, and Node module types after TypeScript 6 by declaring the runtime type packages your project actually uses.
TypeScript 6 rootDir default change: why dist/src suddenly appears
Fix TypeScript 6 output moving into dist/src by setting rootDir explicitly and checking files included outside the source directory.
npm 2FA-bypass token deprecation: how automated publishing should migrate
Prepare npm publishing automation for 2FA-bypass token restrictions by moving to trusted publishing or staged human approval.
npm approve-scripts workflow for teams upgrading to npm 12
A practical team workflow for reviewing npm lifecycle scripts, committing approvals, testing CI, and avoiding blanket trust.
npm 12 allow-remote explained for URL and tarball dependencies
Understand npm 12 allow-remote, identify remote tarball dependencies, and migrate URL-based installs to safer reproducible packages.
How to fix npm 12 blocked git dependencies with allow-git
Fix npm 12 installs that block Git dependencies, find transitive Git URLs, and decide whether to allow or replace them safely.
npm 12 allowScripts explained: why install scripts no longer run by default
Understand npm 12 allowScripts, approve trusted lifecycle scripts, and fix installs that stop building native modules or generated clients.
Designing a fraud detection event pipeline in Node.js
A practical Node.js fraud event pipeline with stable event contracts, idempotent consumers, rules, risk scores, review queues, audit logs, and replay safety.
How to scope a backend portfolio project recruiters can evaluate
Choose a backend portfolio project with one serious workflow, visible engineering decisions, realistic failure cases, and proof recruiters can review quickly.
How to fix ERR_MODULE_NOT_FOUND in Node.js ESM
Fix Node.js ERR_MODULE_NOT_FOUND errors by checking file extensions, package exports, aliases, build output, and ESM resolution in the right order.
Local vs cloud AI coding tools: privacy and speed tradeoffs
A balanced guide to local and cloud AI coding tools, including privacy, context size, speed, model quality, setup, and team governance.
Using AI on legacy code safely: understand before changing
A practical guide to using AI with legacy codebases: map behavior, add tests, avoid blind rewrites, and preserve business rules.
When AI refactors too much: how to keep changes reviewable
How to keep AI coding changes small, reviewable, and safe by limiting scope, separating refactors, and protecting behavior.
AI code diff review checklist before you merge
A practical review checklist for AI-generated code diffs: scope, tests, security, dependencies, error handling, and hidden behavior changes.
Feature flag cleanup: how temporary switches become permanent bugs
How to manage feature flag debt, ownership, rollout states, cleanup dates, and tests for enabled and disabled paths.
Database restore tests: the backup step teams forget
Turn database backups into a tested recovery process with clear RPO and RTO targets, isolated restore drills, integrity checks, application tests, and evidence.
Background job idempotency: why workers repeat work in production
How to design idempotent background jobs so retries, crashes, and duplicate messages do not double-charge or double-send.
Audit logs for product apps: what should you record?
A practical audit logging guide for SaaS and backend apps: admin actions, auth events, data changes, exports, and privacy balance.
Password reset token design: small mistakes that create big risk
A practical guide to password reset tokens, expiration, single-use links, account enumeration, logging, and safe reset flows.
SameSite cookies explained: the setting that prevents many surprises
How SameSite cookie settings work, why they matter for login sessions, and where Strict, Lax, and None fit.
CORS misconceptions: why disabling it is not an API security plan
Understand what CORS actually controls, configure credentialed origins safely, debug preflights, and keep authentication and authorization as separate API boundaries.
Content Security Policy explained for normal web developers
A practical CSP guide with report-only rollout, strict policies, nonces, hashes, third-party scripts, reporting, and production checks.