Exploring Ideas: A Blog on Technology, Startups, Food, and More
Welcome to my blog where I share thoughts and insights on technology, startups, and life in Atlanta. Browse through the articles below or explore by topic.
Bandit Severity Levels: Understanding High, Medium, and Low Findings
May 29, 2025
The first time I ran Bandit on a legacy codebase, it returned 312 security findings. My immediate thought was: “Where do I even start?” Some issues seemed catastrophic, others looked like nitpicks, and many fell somewhere in between. The raw number of findings was overwhelming, but what really saved my sanity was understanding Bandit’s two-dimensional classification system. Bandit doesn’t just tel...
Your Family Financial Dashboard: Seeing the Complete Picture
May 28, 2025
One of the most valuable services a family office provides is comprehensive financial reporting: giving family members a clear, real-time view of their complete financial picture. While ultra-wealthy families often have custom-built dashboards costing tens of thousands of dollars, you don’t need that kind of budget to create an effective financial dashboard for your family. Why a Financial Dashboa...
Bandit's Hardcoded Password Detection: Rules B105-B107 in Practice
May 27, 2025
Picture this: you’re reviewing a pull request at 2 AM, trying to ship a critical bug fix before morning. Hidden in line 247 of a configuration file, you find DATABASE_PASSWORD = "prod_db_2023!". Your heart sinks as you realize this password has been sitting in your GitHub repository for three months, visible to anyone with read access. This scenario plays out more often than you’d think. Hardcoded...
Bandit Security Rules: Complete Python Vulnerability Guide
May 26, 2025
When you first run Bandit on a production codebase, you’ll get back a 47-page report filled with cryptic rule numbers like B105, B608, and B301. My initial reaction to that is normally panic, followed by the urge to add # nosec comments everywhere and call it a day. But here’s the thing about security tools-they’re only as good as your understanding of what they’re actually telling you. Bandit org...
Practical MCP Use: Real-World Workflows with Model Context Protocol
May 24, 2025
In the ever-evolving landscape of developer productivity, finding tools that genuinely streamline your workflow is a constant challenge. Over the past few months, I’ve been experimenting with the Model Context Protocol (MCP) in Cursor, and I’ve published four open-source MCP servers that have become essential to my daily routine. In this post, I’ll walk through what MCP is, introduce each server, ...
Juggling Projects? Analyze Multiple Repos at Once with GitPandas
May 23, 2025
So, you’ve got your Git analysis chops honed with gitpandas on a single repository. Nice! But what happens when your project isn’t just one repo? Maybe you’re wrangling microservices, managing a monorepo with distinct sub-projects, or just have a collection of related tools living in separate folders. Analyzing them one by one is a drag. Fear not! gitpandas has a nifty tool called ProjectDirectory...
Remote Work vs Asynchronous Work: Why Async Wins, Wherever You Are
May 22, 2025
When people talk about “remote work,” they often assume it means working asynchronously. But that’s not always true. Remote work just means you’re not in the same physical place as your team. Asynchronous work, on the other hand, is about not needing everyone to be online or working at the same time. The are related but distinct concepts. You Can Mix and Match Synchronous Remote Work: Your team is...
Group Decision Making: Team Dynamics in Life-Critical Situations
May 21, 2025
Imagine this: A flight crew faces a sudden storm. A trauma team in a hospital juggles multiple critical patients. On a nuclear submarine, officers must act fast when a system malfunctions. In all these cases, teams have to make big decisions, fast, with limited information, and the stakes couldn’t be higher. So, how do organizations make sure their teams get these decisions right, even under pres...
Stargazers CLI Update: Nested Commands, Account Trends, and Plotting!
May 20, 2025
Big news for users of the stargazers CLI! The latest update brings a cleaner command structure and some powerful new features for analyzing your GitHub stars and forks. (See the commit here) All Commands Now Under stargazers Previously, the CLI had separate entry points for different commands. Now, everything is neatly organized under the main stargazers command. This means you’ll run subcommands ...
Mutation Testing with mumut for Pygeohash
May 19, 2025
Ensuring the reliability and correctness of a library like pygeohash is paramount. While traditional code coverage metrics tell us which lines of code our tests execute, they don’t tell us how well those lines are tested. Did our tests actually check the logic, or did they just run through it? This is where mutation testing comes in. What is Mutation Testing? Mutation testing is a powerful techniq...
Subscribe to the Newsletter
Get the latest posts and insights delivered straight to your inbox.