$ cat /var/log/thoughts
Filters

147 posts

Build a CLI Tool With Bun in 20 Minutes

Build a CLI tool with Bun from scratch: argument parsing, colored output, and compilation to a standalone binary. Zero config, real runnable code, one file.

Build AlongBunTypeScriptCLIDeveloper Tools1 min read · Apr 11, 2026

Cloudflare Is the Biggest Man-in-the-Middle in History (And You're OK With It)

Cloudflare terminates TLS for roughly 20% of all web traffic. Every proxied HTTPS request is decrypted and re-encrypted on their servers. Here's what that means, why we accept it, and what the alternatives actually look like.

Strong OpinionsSecurityCloudflareEncryptionNetworkingWeb DevTrend Commentary1 min read · Apr 11, 2026

Docker Security Audit: What I Actually Found

I ran a security audit on my self-hosted Docker stack and found 6 real issues that every hardening guide missed. Covers network exposure, secrets in env vars, base image risks, and automated scanning with Trivy and Dockle.

Meta AnalysisDockerSecurityDevOpsLinuxContainers1 min read · Apr 11, 2026

Stop Treating localStorage Like a Database (It Will Bite You in Production)

localStorage has a 5-10MB limit, throws QuotaExceededError silently, and vanishes in Safari private browsing. Here are the five ways it breaks in production and what to use instead.

Sharper ToolsJavaScriptWeb DevDebuggingPerformance1 min read · Apr 11, 2026

JavaScript Monorepo Setup That Doesn't Make You Want to Quit

A practical javascript monorepo setup using npm workspaces and Turborepo. Real folder structures, shared TypeScript packages, and fixes for the errors you'll actually hit.

Build AlongJavaScriptTypeScriptNode.jsDeveloper ToolsProductivity1 min read · Apr 11, 2026

Node.js Auth in 2026: Passport.js Is Dead, Here's What Replaced It

The Node.js authentication landscape in 2026 splits into three camps: managed services like Clerk, self-hosted libraries like Better Auth, and framework-native solutions like Auth.js. A fair comparison of when to pick each.

Worth UsingNode.jsAuthTypeScriptComparisonWeb Dev1 min read · Apr 11, 2026

Why the Most Productive Developers Aren't the Loudest AI Users

The METR study found AI tools make experienced developers 19% slower. The most productive developers use AI selectively and quietly. The loudest adopters ship the least.

Strong OpinionsAI CodingProductivityTrend CommentaryDeveloper Tools1 min read · Apr 11, 2026

The Self-Hosted Developer Stack: Cancel Everything, Own Everything

Self-hosted developer tools in 2026 replace $200+/month in SaaS with a single $20/month VPS. After migrating 8 services off managed platforms, here is every tool, the migration difficulty, and what to skip.

Worth UsingDeveloper ToolsSelf-HostingLinuxDockerProductivityDevOps1 min read · Apr 11, 2026

TypeScript Types Have Gone Too Far (And What to Do About It)

TypeScript type complexity has become a status symbol. When the type definition is longer than the function it describes, something went wrong. Here is what actually works.

Strong OpinionsTypeScriptDeveloper ToolsProductivityWeb Dev1 min read · Apr 11, 2026