Latest articles
Security · Web Development
When `npm install` Becomes a Trap: The New Wave of NPM Malware
A logging library shouldn't be able to steal your AWS keys — yet that's exactly what the latest wave of npm malware is built to do, and it changed how I install.
npmSupply Chain SecurityJavaScriptTypeScriptNode.jsDependency ManagementCI/CDDevSecOpsOpen SourceApplication Security
Software Architecture · Security
Auth0 vs Keycloak: How I Choose for Scalable Identity
The hardest part of a distributed system isn't the microservices — it's deciding who owns identity, and that's the call I see teams underestimate the most.
Auth0KeycloakIdentity and Access ManagementOAuth2OpenID ConnectSAMLAuthenticationSingle Sign-OnMulti-TenancyMicroservices