The latest articles on DEV Community by Ym zerotwo (@ym_zerotwo_8bbff6a4570ace). https://dev.to/ym_zerotwo_8bbff6a4570ace https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3720062%2Fb4418e1b-cc32-4a64-9801-e1b84726157f.jpg https://dev.to/ym_zerotwo_8bbff6a4570ace en Ym zerotwo Thu, 22 Jan 2026 20:06:11 +0000 https://dev.to/ym_zerotwo_8bbff6a4570ace/something-big-is-coming-your-way-4g7 https://dev.to/ym_zerotwo_8bbff6a4570ace/something-big-is-coming-your-way-4g7 <p>Something big is coming your way 🚀<br> <a href="https://github.com/Ymzerotwo/Core-X" rel="noopener noreferrer">https://github.com/Ymzerotwo/Core-X</a><br> <a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fag3rbj5oebd8utvezeb9.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fag3rbj5oebd8utvezeb9.png" alt=" " width="800" height="449"></a></p> node express opensource Ym zerotwo Mon, 19 Jan 2026 16:49:58 +0000 https://dev.to/ym_zerotwo_8bbff6a4570ace/stop-reinventing-the-wheel-meet-core-x-a-secure-nodejs-supabase-boilerplate-55op https://dev.to/ym_zerotwo_8bbff6a4570ace/stop-reinventing-the-wheel-meet-core-x-a-secure-nodejs-supabase-boilerplate-55op <p>Hi everyone,<br> I'm excited to share a project I've been working on: Core-X.<br> As Backend developers, we often spend the first few days of any project setting up the same repetitive structure: Security headers, Auth middleware, Logging, and Input validation. Core-X is designed to solve this pain point.<br> It is a production-ready Node.js + Express + Supabase boilerplate that comes pre-configured with industry-standard security practices, allowing you to focus immediately on building your APIs and Database schemas.<br> 🔥 Key Features:<br> 🛡️ Stateless CSRF Protection: Implements the "Double Submit Cookie" pattern (No legacy/deprecated libraries).<br> ⚡ Supabase Integration: Optimized middleware for Auth &amp; Token management.<br> 🪤 Built-in WAF Lite: Auto-detects and blocks malicious payloads (SQLi, XSS) via a custom Security Validator.<br> 📝 Advanced Logging: Centralized logging system using Winston (with daily rotation).<br> ✅ Type-Safe Validation: Full Zod integration for request validation.<br> ⚠️ Status: The project is currently under active development.<br> I would love to get your feedback on the architecture and security implementation. Contributions and Code Reviews are highly welcome!<br> 🔗 Repository: <a href="https://github.com/Ymzerotwo/Core-X" rel="noopener noreferrer">https://github.com/Ymzerotwo/Core-X</a><br> If you find it useful, please consider giving it a Star ⭐️ on GitHub!<br> <a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F5ekqwzxxzglit2rkl4n5.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F5ekqwzxxzglit2rkl4n5.png" alt=" " width="800" height="449"></a></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F7bwrh0q94luxb3txnrsr.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F7bwrh0q94luxb3txnrsr.png" alt=" " width="800" height="449"></a></p> backend node security showdev