Your Dependency Tree Is an Attack Surface: Supply Chain Defense for npm and PyPI in 2026
Every `npm install` is an act of trust. You are executing code written by strangers, versioned by strangers, published through
Category: Software Engineering
Reading EXPLAIN ANALYZE Like a Planner: A PostgreSQL Field Guide
A slow query arrives. Someone runs EXPLAIN ANALYZE, pastes the output into a search engine, and a verdict comes back:
Continue readingReading EXPLAIN ANALYZE Like a Planner: A PostgreSQL Field Guide
Distributed Rate Limiting in Go: Token Buckets, Redis, and the Fail-Open Decision
Rate limiting looks like a solved problem until the day your API runs on more than one machine. The in-memory
Continue readingDistributed Rate Limiting in Go: Token Buckets, Redis, and the Fail-Open Decision
The Transactional Outbox in Go: Reliable Event Publishing Without Distributed Transactions
Here is one of the oldest bugs in distributed systems, still shipping to production every week: a service commits a
PostgreSQL Connection Pooling in Go: Sizing pgxpool, Reading Its Stats, and When PgBouncer Earns Its Keep
Every Go service that talks to PostgreSQL ends up managing a pool of database connections, and almost every team gets
Mutation Testing in 2026: Stop Trusting Coverage, Start Killing Mutants
Every test suite has a hidden layer of confidence that coverage numbers never touch. A line can be executed by
Continue readingMutation Testing in 2026: Stop Trusting Coverage, Start Killing Mutants
API Versioning Without Tears: Sunset Headers, Major Versions, and a Go Implementation
Sooner or later every API team hits the wall: a client depends on behavior you need to change. The field
PostgreSQL MVCC in Production: Dead Tuples, Autovacuum, and the Bloat-Wraparound Trade
Ask a PostgreSQL database administrator what kills databases in production and you’ll hear about wraparound — the event where a
Tokio Internals: Cooperative Budgets, Wakers, and the Polling Policies That Keep Tasks Fair
Every Tokio application eventually meets the same mystery: a task that looks harmless in code review brings an entire runtime
Prometheus Cardinality: Why Your TSDB Is Drowning and How to Stop It
Eventually the alert fires at 3 a.m.: your Prometheus is consuming more memory than the database it monitors, queries that
Continue readingPrometheus Cardinality: Why Your TSDB Is Drowning and How to Stop It