31 results for "all documents"
languages/javascript/code_style_guide.md
Agent-facing linter/formatter decision guidance for 2026: Biome 2.x's type-aware linting (no TS compiler needed), current ESLint/typescript-eslint/eslint-plugin-react-hooks versions, and when ESLint's plugin ecosystem st...
core/testing/mocking_strategies.md
Precise definitions of dummies, stubs, fakes, spies, and mocks, the London (mockist) vs Chicago (classicist) schools of TDD, and concrete guidance on when mocking makes tests brittle and how to avoid over-mocking.
databases/nosql/mongodb/best_practices.md
Production guidance for MongoDB covering embedding vs referencing schema design, compound indexing and index intersection limits, the aggregation pipeline, multi-document transaction costs, and when a document store beat...
languages/nim/best_practices.md
Idiomatic Nim: the partial case/underscore-insensitive identifier rule, the module export system, choosing proc/func/template/macro/iterator/method, ARC/ORC value semantics, exception-based error handling with the raises...
languages/nim/common_pitfalls.md
The canonical, exhaustive catalogue of Nim semantics that cause confident-but-wrong LLM-generated code: partial case/underscore-insensitive identifiers, the Nim 1.x-to-2.0 ARC/ORC memory-management default change, ref-vs...
languages/nim/interop_ffi.md
Verified guidance on Nim's C FFI (importc/exportc/header/emit), cstring lifetime and GC-safety pitfalls, c2nim binding generation, and compiling Nim to the C++ (importcpp), JavaScript (importjs), and Objective-C (importo...
languages/javascript/frameworks/backend/nodejs_best_practices.md
Production patterns for building maintainable, secure, and high-performance Node.js backends in 2026: Express vs Fastify vs Hono vs NestJS trade-offs, centralized error handling, streaming/backpressure, and structured lo...
core/security/osint_reconnaissance.md
Methodology and tooling for open-source intelligence (OSINT) gathering as the first phase of an authorized security assessment: passive and active recon, subdomain enumeration, internet-wide scanning indexes, dorking, an...
core/security/owasp_top_10.md
The current OWASP Top 10:2025 web application security risk categories with concrete mitigation guidance and code-level examples for each, grounded in the official OWASP release.
core/security/penetration_testing_methodology.md
The full authorized penetration-testing lifecycle - legal prerequisites, methodology frameworks (PTES, OWASP WSTG, NIST SP 800-115, OSSTMM, MITRE ATT&CK), engagement phases, exploitation frameworks, and coordinated discl...