Abdulsamad Ayoade

Does YC now fund solo founders, wow

I’ve started working on rnxsec (React & Next.js Security) to keep track of vulnerabilities across React and Next.js—things like CVEs, severity, affected versions, patches, and fixes—all in one place. I’m also building an MCP server to help AI agents avoid installing vulnerable versions in the first place.

I put together 1000 Reasons Why You should not Vote for Tinubu in the next election. 1000-reasons.vercel.app Good morning Nigerians.

@ShawkyMesbah yeah it is, there is so much to learn working in an agency

@abdullllsamad wearing multiple hats at an agency is the fastest way to level up as a dev. react vue php shopify nestjs aws all in one role. thats a crazy breadth of experience

Working at an agency is really something man. I was hired as a React/NextJS developer, but my role has expanded far beyond that. Since joining, I’ve worked with Vue and PHP, built integrations for clients using Shopify, and even developed a Shopify app for collecting donations. I’ve also built APIs using NestJS and MongoDB, created a tournament bracket system on WordPress for a client, and handled infrastructure issues on an AWS Lightsail instance. Along the way, I’ve developed full-stack applications using tools like Express and Redis, and implemented custom integrations with platforms like Planning Center and Subsplash for Webflow clients. On the frontend side, I’ve built applications powered by CMS platforms like Sanity & Contentful and integrated them with Shopify, allowing content managers to manage both content and products seamlessly without switching between systems. Just a few days ago, my manager and I started discussing a mobile app we’ll be building, and I’m genuinely excited to dive into that as well. That’s one of the things I love about agency life, you get to wear multiple hats, and your impact is felt across different projects and tech stacks. It can be challenging at times — deployments break, webhooks fail to trigger, clients raise urgent issues, and there’s a constant need to sync and context-switch. But in the end, it’s incredibly rewarding.

@ShawkyMesbah Yeah, security is like an afterthought to most FE devs

@abdullllsamad CBN flagging nextjs vulnerabilities in server actions is a wake up call. web app security is the skill gap most frontend devs dont even know they have

I really love using React/Nextjs daily but one of the things I'm concerned about is the vulnerabilities. At work today, we got a circular from the CBN about vulnerabilities in some versions of React and Nextjs (esp. if using App router and server actions) and the need to urgently address them, while we've fixed them I'll be spending a good chunk of this month learning about web app security and how to build secure react/nextjs applications. First, I need to create a curriculum.

I say this is a good start

@obiabo_immanuel thanks man

@abdullllsamad This should help out. owasp.org

@obiabo_immanuel Oh yeah, I'm using this alongside the learning materials from @PortSwigger 's academy

@commando_skiipz big chief, could you please share any resources you have on securing web applications? I'm trying to learn how to build secure web apps and I've made some research already but still want to learn one or two from you. Thank you

@obiabo_immanuel oh, I hope you get it man

@abdullllsamad Google Summer of Code

Just submitted one of my GSoC proposal before the deadline. All fingers 🤞 crossed now.

@olychris_ @Rxbremen You can use datamax

@Rxbremen How can I buy shares from them Someone should put me through bikooooo

What is this GTCO news I’m seeing 😭😭😭❤️❤️❤️❤️❤️❤️

@obiabo_immanuel thanks man

@abdullllsamad Awesome.

I onboarded a couple of developers to a project a few days ago, and one of them suggested using Axios. I explicitly asked him to use the Fetch API instead, unless he could clearly explain what Axios would enable him to do that Fetch cannot. Reaching out to external pages is something I'm wary of.

@obiabo_immanuel yeah, we have a wrapper around fetch that include some of the features that axios offer such as base URL, default headers, automatic JSON parsing, timeout support and request/response interceptors.

@abdullllsamad Amazing, you must have had a good reusable util for your fetch api.

@johnxayanyemi @nombahq impressive! well done

Spent the last 72 hours redesigning the @nombahq landing page to feel less generic and actually like Nomba. Here’s what I changed and why 👇🏾