Kiell Tampubolon
Author ProfileClaim This Author Profile
Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.
π dev.toSource
I parsed 4,750 workflows from 300 popular repos. 145 of 265 that use third-party actions still reference one by a movable tag or branch.
π dev.toSource
I replayed 11,556 malicious npm and PyPI packages from 2026 against a dependency cooldown. Hijacks die fast, typosquats don't, and fixes pay the bill.
π dev.toSource
Checklist trust store container dengan data nyata: 30 image Docker dipindai 24 Oktober 2026. Sepertiga masih membawa emSign ECC Root CA - G3.
π dev.toSource
UUIDv7 primary keys help database indexes, but the embedded timestamp is not a reliable clock. Four tests to run before migrating your PostgreSQL IDs.
π dev.toSource
Eight eMudhra intermediate CA keys were one byte long. Browsers blocked them, but containers, curl, Python and Java may not. A 15-minute trust store audit.
π dev.toSource
PHP2Shell: PHP patched two critical RCE bugs on October 21. Five checks to prove the fixed PHP version is actually running in your Docker containers.
π dev.toSource
From Dev.to - javascript: I Struggled with Data Analysis. Claude for Excel Changed Everything.
π dev.toSource
From Dev.to - javascript: I Struggled with a Bug for Days β Here's What I Learned About Clean Code and Debugging
π dev.toSource
From Dev Community: I Deployed My First Cloudflare Worker β Here's What I Learned
π dev.toSource
From Dev Community: I Thought I Understood State Management in React. Then a Memory Leak Happened.