The Portability Audit Take-Home: Grade Environment Assumptions, Not Features
A take-home that runs on the reviewer's laptop grades features; a take-home that runs anywhere grades engineering discipline. The task below asks a…
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
Node.js SMS Alert API: 3 Template Ownership Rules for Home Security SaaS
The best SMS alert API for a US/EU home-security SaaS is the one that lets the application own message intent and immutable evidence while the trans…
The Cold-Start Budget Packet: A Take-Home Where the Free Server Is Allowed to Vanish
A take-home that never simulates a host restart measures almost nothing about cost discipline. The packet below asks one question: after the machine…
TypeScript Email Tests Need a Typed Event Boundary
Email tests often start with a simple promise: trigger a signup flow, wait for a message, click the link, and assert the account is active. It sound…
SMS OTP Delivery Status Explained: Polling for Creator Payout Verification
For creator payout verification, keep OTP creation, expiry, verification, and session issuance on the server. Normalize US and EU phone numbers befo…
Two things must happen before our server module loads, and a require is all that enforces the order
Notifio is an Electron app whose main process is also its HTTP server. There is no child process: app.whenReady() fires, and then one line pulls an…
Setting an env var above your imports does not run before them, and our integration test works anyway
The largest test file in PubTrivia is 543 lines, and it has no mocks in it. It calls the actual server actions a player's phone calls, and the actua…
How to Rotate Claude API Keys with Secrets Manager and Lambda Without Getting Locked Out
Developers rush to rotate API keys for security, only to discover their AI‑powered apps suddenly start throwing 401 errors. The hidden culprit? A st…
Measure the Escalation Rate. A Local-First Router That Never Earns Back Is Just Latency.
A local-first router only pays off if tier 1 absorbs most of your traffic. If your local model answers 20% of prompts and escalates the rest, you di…
What I Learned Tracking 5 Realtime Moderator Signals in a Node.js Voice Lobby
Short answer: for realtime moderator disconnects in a gaming voice lobby, correlate observability signals across transport, session ownership, and f…
Node.js API Routes and Server Actions: 3 Error Tracking Boundaries (With Attribution)
Instrument three server-side boundaries, but define the cost-attribution record before choosing the error backend. For a customer-support pricing ru…
When POST becomes GET: a redirect bug in a Node.js fetch wrapper
A POST followed a 302 redirect and became a GET. Its body disappeared, but its Content-Type header stayed behind. That showed up while extending the…
E-Commerce Webhook Registration: Node.js Queue Isolation for Internal Consumers
An e-commerce access review becomes hard to sign when fraud, fulfillment, finance, and customer messaging all hold the marketplace webhook credentia…
Recruiting Candidate Search Source Deduplication — A 3-Stage Node.js Retrieval Design
Short answer: use a staged retrieval design with explicit collections, bounded queries, and traceable source context for recruiting candidate search…
I built a Supabase-style query client that talks directly to Postgres
I like the Supabase JS client. .from('todos').select('id, task').eq('done', false) reads like what I mean, and { data, error } means I'm not wrappin…
Property Access Reviews: Readiness Health Endpoint Checks for Cached API Credentials
Use a cached credential-and-tier observation for readiness, and give that observation an explicit age limit. If the last confirmed observation is st…
TypeScript Email Tests Need a Signal Pipeline
Email verification tests often become slow for a reason that is easy to miss: every test knows too much about the inbox. One test starts a poll. Ano…
Implementing an Express API Tracking Scorecard — Error Grouping in Node.js
Short answer: choose the error tracking service that preserves actionable Express stack traces, groups one tenant-cohort failure into one issue, and…
Multi-tenant SaaS with branch-level RBAC in Next.js + Node: a practical architecture
Tenant scoping that fails closed, permissions that know about branches, and the tests that keep both honest. Key takeaways Resolve the tenant from t…
Express.js Transactional Email Service Wrapper: 5 Retry and Logging Layers
A welcome email should leave the request path quickly, but accepting a job is not the same as delivering a message. The reliable design is a small N…
Node.js Read-Only Channel Tokens: Presence-Safe Access for Live Score Viewers
TL;DR: Mint a short-lived token whose claims name one channel and a viewer-only role, then enforce those claims at the media and event boundaries. T…
AWS Lambda Web Functions: your HTTP server on Lambda, with real concurrency and active-CPU billing
On October 12, AWS launched Lambda Web Functions , and it's the biggest change to Lambda's programming model in years. Instead of writing a handler…
Controlling Logistics Templates in a Node.js SaaS SMS Alerts API
For a logistics signup flow, template ownership should follow the party that must explain the message later. Short answer: keep the canonical verifi…
What Is Event Loop Lag in Node.js? How to Measure It (Part 1)
Your Node.js API gets slow. The database looks fine. So do the downstream services. Yet p99 latency has tripled and even the health check takes 300m…
Choosing an API Error Tracking Service: 5 Stack Trace Search Checks
Choose a straightforward error capture, grouping, and search service for a small API, but reject it if your incident process requires per-user delet…
Node.js Cron Health Checks for Missed Pricing Rollout Job Detection
For a Node.js cron health check that must catch a missed pricing rollout job, record every expected tenant-scoped run and alert when its deadline pa…
Our website has 111 tests in four files, no test framework, and every one guards a silent failure
Here is the entire test setup for Notifio 's website, a Next.js app with 38 pages, Stripe checkout, two webhooks and a Postgres table behind it: "sc…
Our lint script tries to lint a directory called lint, and three more configs that point at nothing
Config rots differently from code. Code that stops working throws. Config that stops working usually keeps sitting in the repo looking exactly as au…
Insurance Claims Retrieval Architecture with Node.js: Five Access-Rule Checks
Short answer: use a staged retrieval design with explicit collections, bounded queries, and traceable source context; make access rules part of retr…
JWT Authentication Explained: Theory, Security, and a Complete Node.js & Express Example
JSON Web Tokens (JWT) are one of the most widely used technologies for implementing authentication in modern web applications. You will find JWT in:…