A healthcheck that only says "the process responds" can hide entire business failures. What Docker HEALTHCHECK actually measures, where people overestimate it, and a decision matrix so you stop promising more than the mechanism can deliver.
Jul 03 2026 · 7′ · Tutorials · docker · devops
Adding an npm dependency isn't just installing code — it's taking on its maintenance, its attack surface, and its transitive deps. Here's the checklist I run before adding any package to a serious TypeScript project.
Jun 22 2026 · 9′ · Tutorials · TypeScript · pnpm
The README on juanchi.dev says "portfolio landing". The code says something else: an editorial system with repo ingestion, quality gate, automatic rewriting, and crons on Railway. The technical story the README doesn't tell.
Jun 22 2026 · 6′ · Next.js · TypeScript
The Vercel incident wasn't a technical vulnerability — it was a least-privilege failure applied to OAuth. Break down what scope creep is, how to audit it in existing integrations, and what architectural controls prevent a third party from accumulating permissions it doesn't need.
Jun 18 2026 · 11′ · Tutorials · TypeScript · nextjs
Rust has fewer memory CVEs than C/C++ — but that's not the whole story. My analysis of what that number actually says, what it doesn't, and how to turn it into a real technical decision.
Jun 16 2026 · 8′ · Opinion · seguridad · rust
Kubernetes technical interviews have a problem nobody names: they ask about objects you'll never touch in production, while ignoring the mistakes that actually break real systems. Here's the map I was missing.
Jun 16 2026 · 9′ · Tutorials · docker · devops
Formal methods keeps surfacing on the technical radar as the solution the industry ignored. My read: the problem it points to is real, but the recipe floating around omits costs that change the equation entirely.
Jun 15 2026 · 9′ · Opinion · TypeScript · sistemas distribuidos
A municipality announces its "own" LLM and the technical community discovers it might be a merge of an existing model. My read: the real problem isn't the fraud — it's that almost nobody knows how to verify it. Here's the checklist.
Jun 15 2026 · 9′ · Opinion · LLM · open source
Auth tutorials show you the happy path. The real problems in digital identity show up in revocation, state-change propagation, and the trust model. A decision guide from the inside.
May 30 2026 · 9′ · Tutorials · backend · seguridad
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
213 articles published