Security
Secrets management, HTTPS, dependency audits, and the basics of secure shipping.
-
Store and rotate secrets
What counts as a secret, why it can never sit in your repo, and where it goes instead: a .env file locally, your host's dashboard in production, and a clear plan for the day a key leaks.
read -
Understand HTTPS and certificates
What plain HTTP exposes on a shared network, what TLS and certificates actually promise, and the one HTTPS job your host still leaves to you.
read -
Check dependencies with npm audit
What npm audit compares your dependencies against, how to tell which findings matter for your project, and why npm audit fix --force deserves more fear than the warnings do.
read -
Check security before you ship
A practical pre-ship pass for your first real app: secrets, user input, passwords, dependencies, HTTPS, and the rules client-side JavaScript can never enforce.
read