MoroJS

Simple. Powerful. Fast. Open Source.
We make the best API toolkit anywhere, join in the convo, try us out!

💬

[池田 泰延 @clockmaker]

VoidZero社がCloudflareに参加した衝撃を、
業界地図で整理してみました。

[OSO @osodevops]

Scaling Node.js APIs with Auto-Sharding on Kubernetes https://t.co/eu8CyZtaPj

[Vojta Holik @vojta_holik]

knowledge has a shape

[Alain Meier @alain]

Discovered a new method for detecting if someone is using Incognito in Chrome:

Write 512 tiny 1-byte responses into a scratch Cache API cache, then read:

https://t.co/gsVNLl57y6.estimate().usageDetails.caches

Normal Chrome: ~393kb
Incognito: ~85kb

Why? When you're in incognito, Chrome writes to memory instead of disk, which leaves less metadata residue

[Edison @CodeEdison]

Backend development is “simple” as long as you understand these fundamentals:

HTTP basics
• Methods
• Status codes
• Request and response headers

Security & identity
• Authentication vs authorization
• JWTs, sessions, and cookies
• OAuth 2.0
• Password hashing (bcrypt / Argon2)
• Salting and peppering
• 2FA and SSO
• RBAC and ABAC

API fundamentals
• API design principles
• RESTful APIs
• GraphQL
• WebSockets
• API versioning
• Rate limiting and throttling
• Pagination, filtering, and sorting
• File uploads and streaming

Server concepts
• Middleware
• Error handling
• Logging and monitoring
• APM (performance monitoring)
• Server-side rendering

Databases
• Database design
• SQL and NoSQL
• Indexing and query optimization
• ACID properties
• CAP theorem
• Normalization vs denormalization
• ORMs
• Connection pooling
• Transactions, migrations, and seeding

Caching & performance
• Caching strategies
• Redis and Memcached
• CDN integration

Scalability & architecture
• Load balancing
• Horizontal vs vertical scaling
• Monoliths, microservices, and SOA
• Message queues and Pub/Sub
• Event-driven systems
• CQRS and Saga patterns
• API gateways and service mesh

Infrastructure & DevOps
• Docker containers
• Kubernetes orchestration
• CI/CD pipelines
• Environment variables
• Configuration and secrets management

Security hardening
• CORS
• CSRF protection
• XSS prevention
• SQL injection prevention
• Input validation and output sanitization

Background processing
• Background jobs
• Cron jobs and schedulers
• Worker processes

Concurrency & runtime
• Async/await
• Promises and callbacks
• Thread pools
• Process and memory management
• Garbage collection

Quality & tooling
• Testing (unit, integration, E2E)
• Mocking and stubbing
• API documentation (Swagger / OpenAPI)
• Postman or Insomnia
• Git and version control
• Code reviews
• Debugging and benchmarking

Production
• Deployment strategies
• Monitoring in production

Once you grasp these, backend stops being “mysterious” and starts becoming systematic.

[Dhanian 🗯️ @e_opore]

Day 27 of Learning Backend Engineering.

Understanding CORS and Securing Your API.

Grab the Backend Engineering Ebook: https://t.co/qQcR0x4fAo

[Python Developer @PythonDvz]

Every developer remembers their first framework.
That one moment when a simple “Hello World” felt like magic.
Some started with React.
Some fell in love with Angular.
Others built their first app using Django, Laravel, Vue, or Express.
Back then, we didn’t care about “best framework debates.”
We were just excited to make something work.
So… which framework started your journey into development?
Drop yours below 👇

#Programming #WebDevelopment #ReactJS #Angular #VueJS #Django #Laravel #NextJS #Python #JavaScript

[MoroJS @Moro_Js]

write once, deploy everywhere. node.js, vercel edge, aws lambda, cloudflare workers. same code. no adapters. no rewrites. just `export default app`. stop rewriting your api for every platform.

[MoroJS @Moro_Js]

nestjs devs still writing 40 files to make a hello world. morojs: createApp() .get('/', () => 'hi') .listen(3000) enterprise features, zero decorators, zero modules. stop over-engineering. start shipping.

[MoroJS @Moro_Js]

hono devs are still wiring up auth, rbac, and ws adapters manually. morojs ships it all built-in. no "exercise for the developer" here. you want enterprise features? they’re already there. you just call them. stop building plumbing. start building apps.

[Shark Rating @SharkRating]

koush/scrypted - Scrypted is a powerful, open-source video integration and automation platform that seamlessly connects various home security cameras and smart devices. #OpenSource #TypeScript 🔗 https://t.co/jHjUARUcSz

[Jerry 🖖 @jerrynixon]

Welcome to Denver Dev Day, Colorado's premier, local community-organized developer event.

With presentation topics ranging from desktop, micro-services, and web development to patterns, the cloud, and soft skills, Denver Dev Day is your awesome, free, day-long resource for developer learning. It's a developer conference, silly!

Tell your manager it's time to sharpen the saw. Tell your manager when you get smarter the business gets better. Tell your manager June 26th (it's a Friday) is on your calendar and the whole development team is coming to Denver Dev Day. And, if you are working on neat technology that you could share with other developers in our developer community, step up — let this year be the year you submit a talk to Denver Dev Day.

https://t.co/wmO7eetzuo

[rita kozlov 🐀 @ritakozlov]

the agents docs just got a killer refresh 🔥

if you haven't already, this is your time to try agents on cloudflare

[Thomas Gauvin @thomasgauvin]

first ship on the new team: new docs for agents on Cloudflare! 🚀

really helps to visualize the breadth that @Cloudflare agent platform has to offer:

Communication channels:
- chat/slack/webhook agents
- voice agents with voice
- email agents with email service

Core agent:
- think as ootb harness
- bring your own harness on top of agents sdk and durable objects

Tools:
- sandbox for code execution or running sandbox agents
- MCP (with MCP server portals to secure)
- AI search for document agents
- payments for agentic payment

All with built-in observability

[JFrog Security @JFrogSecurity]

🚨 Supply Chain ALERT New Phase of “Miasma: The Spreading Blight” 🚨

A new wave of the npm supply chain campaign, Miasma: The Spreading Blight
Targets include @‌vapi-ai/server-sdk & ai-sdk-ollama. Attackers are using a new autorun install method exploiting node-gyp shell expansion.

We have updated our previous blog:
https://t.co/gFhlSCFzOu

[Cloudflare Changelog @CFchangelog]

Cloudflare Access now supports SAML assertion encryption for identity providers. Safeguard sensitive identity data from client-side threats by encrypting assertions with a Cloudflare-managed certificate.

https://t.co/d8uUjs4Oij

[Cloudflare @Cloudflare]

Read how the British Academy of Film and Television Arts (BAFTA) uses Cloudflare to bring their public voting system in‐house, prioritizing security and scalability while reducing off-season infrastructure costs to zero. https://t.co/tjGaVngci6

[Tom Dörr @tom_doerr]

Curated list of 102 Node.js best practices

https://t.co/SE5xw2MCrh

[om mishra @BuildWithOm]

Types of APIs Every Developer Should Know 🚀

1. REST API
Most common for web applications

2. GraphQL API
Clients request exactly the data they need

3. WebSocket API
Real-time communication (chat, gaming, trading)

4. gRPC API
High-performance service-to-service communication

5. SOAP API
Still used in many enterprise systems

6. Payment APIs
Stripe, Razorpay, PayPal

7. Authentication APIs
OAuth, JWT, SSO

8. Storage APIs
AWS S3, Google Cloud Storage

9. AI APIs
OpenAI, Anthropic, Gemini

10. Third-Party APIs
Maps, Weather, Email, SMS, Social Media

Most developers know how to consume APIs.

The next level is learning how to design them.

[Soita E. @manusosy]

In fairness to them, JavaScript releases a new framework every 45 minutes, so technically... they aren't lying! 💀