Things I designed, built & shipped

VS Code · TypeScript · Java · 2025

JUnit/JaCoCo coverage and fully offline SonarQube analysis, inside your editor.

• Embedded a real SonarLint + sonar-java engine, shaded into a runnable jar — full rule parity with the server, no per-scan calls
• Auto-detects Maven/Gradle and resolves per-module classpaths and generated sources
• Secrets stored via VS Code SecretStorage — never in settings

VS Code + IntelliJ · 2025

A visual dependency graph of TestNG flows — shipped on two IDE platforms.

• Heuristic Java analysis in VS Code; native PSI in the IntelliJ port
• Layers tests by depth to expose parallel groups and inherited steps
• One concept, ported cleanly to a second editor platform

Go · Linux · nftables · 2026

A per-user, system-wide website/IP blocker that enforces at the Linux kernel packet layer — no setuid anywhere.

• Blocks egress at the kernel packet layer (nftables / iptables+ipset) so even raw-IP curl is caught
• Root daemon + unprivileged CLI over a Unix socket — no setuid bit anywhere; caller identity via SO_PEERCRED
• Per-user private blocklists with an O(1) data plane (hash sets + per-uid verdict map) and atomic, fail-safe applies

Open source · TypeScript · GPL-3.0 · 2026

Local-first Swagger/OpenAPI preview with zero callbacks to any server.

• Refactored to SOLID services (parser, analyzer, navigation, cache)
• Hash-based caching + debounced updates for snappy previews
• Transaction-safe deletion (bottom-to-top to avoid line shifts)

Open Source · Reverse Proxy · 2024

A direction-aware, privacy-first reverse proxy written in Go. Implements a strict deny-then-allow model for metadata and header routing, ensuring zero data leakage across network boundaries.

• Direction-aware, privacy first reverse proxy written in GO
• Implements a strict deny-then-allow model for metadata and header routing, ensuring zero data leakage across network boundaries

Python · OpenShift · Helm · 2024

One command to upgrade a microservice in OpenShift — plus a wider set of ops & AI automations.

• Failure-report triage and merge-conflict resolution via MCP/agents
• Postman environment generation for B2B test suites
• Engineering standards codified as review guardrails

Open source · Java · WireMock · 2026

A WireMock-based alternative to Postman, published as a Maven package.

• Published as a Maven package under the WeDontTrack org
• WireMock-based mocking that fits into existing JVM test workflows
• Privacy-first — no accounts, no tracking

Open source · Multi-language · 2024

Algorithms with pseudocode and implementations across multiple languages.

• Pseudocode-first explanations alongside real implementations
• Multiple languages for the same algorithm
• A learning resource I keep adding to