Complint
ESLint for legal compliance: a static analysis CLI that flags GDPR and privacy risks in TypeScript and JavaScript code, locally and in CI, with plugins for new rules and languages.
Backend, full-stack and AI systems I have designed and built, and 4 merged contributions to open-source projects like Caddy, pytest and ESLint.
ESLint for legal compliance: a static analysis CLI that flags GDPR and privacy risks in TypeScript and JavaScript code, locally and in CI, with plugins for new rules and languages.
A white-label portal that replaces the spreadsheets and group chats student societies run on: members, dues and events, each club under its own URL and colours.
A structural maintenance platform that connects building residents and facility managers, so defects are reported and repaired before they become failures.
An anonymous sharing platform with non-custodial authentication (Ed25519 keys from BIP39 mnemonics) and real-time nested discussion.
A Trust & Safety microservice for automated PII scrubbing, image forensics and AI-generation detection on anonymous reports.
A multi-tenant staff administration API that enforces regional authority boundaries and requires OTP verification for high-risk personnel changes.
A contract analysis system that extracts obligations, flags risky clauses and missing protections, and produces structured risk reports for commercial agreements.
A stock market simulator built as a closed economy: equal starting capital, real broker costs and seasonal leagues, so rankings measure skill rather than deposits.
Fixes and features in other people's projects: 6 contributions, 4 merged.
Found and fixed a TLS config validation bug where invalid curves and protocol_min/protocol_max values were silently accepted, letting a config meant to enforce TLS 1.3 accept TLS 1.2 connections. Implemented validation and protocol ID comparison to the maintainer's spec, with tests.
Found and fixed a bug where assertion diffs printed Python 3.15's built-in frozendict on a single line. Registered it with pytest's pretty-printer and, following review, aligned its fallback formatting and depth limits with CPython's implementation, with version-gated regression tests.
Added a Unique() filter to the Pipe API that removes consecutive duplicate lines (like Unix uniq) while streaming output, built on FilterScan, with tests covering consecutive, non-consecutive, empty and duplicate-free input.
Documented a known limitation of the preserve-caught-error rule: it matches error class names without resolving scope, so a local class with the same name can trigger a false positive. Revised the example after maintainer review.
Found a spec-compliance bug in PEP 728 TypedDict support: subclasses silently lost their closed/extra_items settings, and extra_items=Never or ReadOnly[...] crashed schema generation. Identified the root cause; a maintainer shipped the fix.
Fixed a TLS configuration bug where tlsCipherSuites rejected the standard IANA names for the ChaCha20 cipher suites. Mapped both names to the same suite IDs to keep backward compatibility, and added regression tests.