Blog
Field notes on shipping software that lasts.
security
Rate limiting and audit logs: the boring security you actually need
Not CAPTCHAs, not 2FA — the two unglamorous features that stop the most common abuse and the most common 'wait, who did that?' support ticket.
postgres
Why this starter uses Drizzle instead of Prisma
Both are good. Here's the specific tradeoff that made Drizzle the default for a starter meant to be read, not just run.
saas
Shipping a SaaS MVP in a weekend
What actually has to exist before you can charge someone money, and what doesn't — a checklist for the first 48 hours.
Get new posts by email