Skip to content
The Cubas

Shipped systems

Anyone Can ShowA Screenshot.Here Is The Hard Part.

Six builds running in production, described by what actually went wrong and what was done about it. The connection leak. The privilege escalation path. The race that dropped cart updates. That is the part worth reading.

What has The Cubas built?

The Cubas has shipped multi-vendor marketplaces, ecommerce platforms, booking applications and developer tools using Next.js, React, TypeScript, Node.js, PostgreSQL and MongoDB. Each build is documented with the engineering decisions and production incidents behind it rather than a feature list.

Projects live

11

Shipping since

2021

Published

IEEE, 2023

Stack

Next.js, Node.js, TypeScript

6 builds · 4 categories

The Catalogue

Marketplaces, stores, booking systems and developer tools. Each one links to a full write up of the architecture and the problems that shaped it.

Who builds this

Ashraful Islam Hridoy, Lead Engineer

Ashraful works across backend decisions and frontend detail. He designs typed REST APIs and data models, builds background jobs and authentication flows, then brings those pieces into Next.js and React interfaces that stay usable under real conditions.

The experience that shaped how he works came after launch rather than before it. Investigating a connection leak that only appeared under load. Closing a privilege escalation path found in his own audit. Fixing a race condition that dropped cart updates during rapid clicks. Those taught him to verify how a system behaves, not how it reads in code.

Run the gate CI runs

Tests, lint, typecheck and build before a pull request is called ready, then an end to end check against production. Some checks passing is not the checks passing.

Verify a finding before fixing it

Audit findings get reproduced first. Some turn out to be false positives, and some implied fixes would break features that already work.

Push back when a finding is wrong

A checkout that refetches price and stock before charging a card was flagged as wasteful. In a payment flow that is the correct behaviour, so it stayed, with the reason written down.

Defer loudly, never silently

When a fix needs an architecture change with more regression risk than it removes, it is listed as deferred with the reason rather than quietly dropped.

Fix the choke point, not the call site

A rule that applies to a whole class of routes is mounted where that class is mounted, so a new route cannot forget it.

Backend
Node.jsTypeScriptPostgreSQLPrismaRedisBullMQ
Frontend
Next.js 15React 19TypeScriptTailwind CSSTanStack QueryZustand
Tooling
TurborepoVitestESLintnpm workspacesTesting LibraryGit

Your Build Is The Next One On This Page

Send us the brief or the broken thing. We will tell you what it takes and whether it needs building at all.

Prefer to skip the form? Message us on WhatsApp or email yousuf@thecubas.com