Liran Tal's Blog

What are some common anti patterns and signs of tight coupling in a Node.js codebase and the challenges they present?

If you're building LLM and AI-powered chatbots like me you might need to read and parse PDFs or create PDFs in Node.js.

How do you handle TypeScript, dual ESM and CJS publishing, and the JavaScript toolchain in 2025?

How to set up Home Assistant YouTube DNS blocking with AdGuard and Lovelace buttons for a more action friendly interface.

Learn how I got the Starlight documentation framework in Astro to create a gated content website with authentication for my Bun Security course

Step-by-step tutorial on configuring a Google Cloud project and storing images in Google Cloud Storage.

Imagine if we applied behavioral economics principles to application security methodologies and practices, what would be able to unlock?

Can Astro automatically import components in markdown files?

This article explores the use of `Promise.withResolvers` in Node.js tests, providing examples and refactoring techniques to handle nested tests and signal their completion effectively.

Learn how to supercharge your Vue.js 3 app with TanStack Query.

The rise of zero dependency JavaScript with packages like `neotraverse` and the controversy around the `axobject-query` package demonstrate the different perspectives and trade-offs that developers and maintainers need to consider when building and mainta…

How about we try a different approach to ChatGPT, Google Gemini or Anthropic's Claude?

Current adoption craze for GenAI tools like ChatGPT bring hidden costs in the form of privacy, security, data leakage, latency and availability.

Getting Playwright to work on Heroku wasn't smooth sailing.

Tired of seeing poor authentication patterns in Node.js applications and Express code examples?

Learn how to block specific LAN client IPs from accessing YouTube and other media sites using AdGuard add-on and Home Assistant.

A break-down of how to set up Fastify to work on serverless Firebase Functions and access the request's rawBody to validate incoming HTTP webhooks requests from Lemon Squeezy.

You have an Astro blog?

Follow these best practices to bootstrap a Node.js application configuration in a robust and maintainable way using env-schema.

Often smart home automation enthusiasts want to access their Home Assistant instance remotely.

Every Node.js application needs configuration management, but there are many ways to do it.

Vue.js revolves around a reactivity system, which is unlike React.

Do you ever struggle to come up with creative presentation titles?

Process long-running tasks in Node.js with background jobs.

Level up your Node.js apps with env-schema!

A comprehensive guide to adopting Changesets for semantic versioning and publishing packages in monorepos and non-monorepo projects.

How to deploy a Vue 3 static site to Heroku with a Fastify Node.js backend server to serve the static files.

How to harness the power of streams in Fastify web applications without resorting to raw HTTP replies via reply.raw and reply.hijack().

I found a Local File Inclusion (LFI) security vulnerability in xmlhttprequest library but it's still unfixed.

proof-of-concept showing a denial of service vulnerability in a Node.js web server if it uses the xmlhttprequest library to make outgoing HTTP requests

Customizing AsciiDoc can be challenging at times, especially when it comes to admonitions.

If you are looking for a way to write your book in a format that is easy to read and write, and that can be easily converted to other formats such as PDF, ePUB and HTML, then AsciiDoc is a great choice.

Reflecting on the spirit of the GitHub Stars award and capturing the essence of the journey towards the recognition and open source community engagement.

Reflecting on ReadyCodePush, the first open source activism program I ran in 2022 and how it welcomed underrepresented groups and students into open source software.

PageFind client-side search for Astro is simple but if you want to add search capabilities to a personal blog then you might think of Algolia first.

In this post, I will show you some advanced usage patterns for working with Playwright in order to take a screenshot of a specific element and modify the contents of the image, either before taking the screenshot or after, using image preprocessing tools.

Being an active content creator, whether this is writing, video, or any other form of content requires a good deal of time and effort.

How can we harness AI and crowd-sourced workflows into our day to day interactions with the command-line?

What do you think of the following JavaScript URL validation function code?

How do you find events to attend or speak at?

My GitHub Actions hackathon application entry is about all the small things that would contribute to a better maintainer life.

This is a blog mirror of Snyk’s State of JavaScript frameworks security report 2019.

As a follow-up to Snyk’s State of JavaScript frameworks security report 2019, this section of the report is about Angular and React…

This article is from Snyk’s State of JavaScript frameworks security report 1.

In the State of Open Source Security Report 2019, we set out to measure the pulse of the open source security landscape throughout the…

Sharing my thoughts and experience on attending JSConf Budapest for the first time

npm security tips to keep you safe of malicious modules

what makes a test case good?

June 4th is a historic date where the millionth package was indexed into the npm registry. npm is a package manager for JavaScript packages.

Sometimes, when building an application inside a Docker image, you need secrets such as an SSH private key to pull code from a private repository but you may be going about it the wrong way by leaking secrets into the image.