Developer releases open-source library to detect tampering in audit logs

·1 views

A developer has released chainlog, a lightweight open-source TypeScript library designed to make application audit logs tamper-evident. The library works by chaining SHA-256 hashes across log entries, so any alteration, deletion, or reordering of past records breaks the chain and is flagged by a single verify() call. Unlike heavyweight solutions such as Google's Trillian or immudb, chainlog wraps an app's existing logging infrastructure without requiring data migration or additional services. It currently ships with in-memory, JSONL-file, and SQLite storage backends, with Postgres, MySQL, and MongoDB adapters planned for future releases. The project is MIT-licensed and targets use cases such as compliance auditing under SOC 2, HIPAA, and ISO 27001, where log integrity may need to be demonstrated.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Iraqi Developer Builds Free Research Portal Offering Access to 250 Million Papers

Ehsan, a developer from Baghdad, Iraq, created ScholarAI Pro to address the high cost of academic papers, which can reach $35 each — roughly a month's salary in Iraq. The platform provides free, login-free access to over 250 million research papers sourced through the OpenAlex and Semantic Scholar APIs. It also offers AI-generated summaries and direct PDF downloads where available. Built on Next.js 14 and hosted on Vercel, the site has attracted users primarily from the US, Germany, Iraq, and Canada since launch. Ehsan is seeking feedback from researchers and students on how to improve the platform further.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Creates Word Cipher Using ASCII Code Products, Encodes Linus Torvalds Quote

A developer shared a cryptographic puzzle on DEV Community where each word in a sentence is replaced by the product of its letters' ASCII values. The encoded sentence turned out to be 'Linus doesn't want his Linux to be called GNU/Linux,' a nod to the longstanding debate between Torvalds and Stallman over naming. The slash in GNU/Linux was represented as actual mathematical division, making that word appear as a small decimal fraction. Solvers could deduce word lengths from digit counts and identify letters through ratios between encoded values. The developer also shared a short Python snippet to generate such ciphers and suggested ways to make future puzzles harder to crack.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Dev Team Rebuilds AI App Backend in 48 Hours After API Key Theft by Bots

The team behind AI mentor KODA suffered an overnight credential breach after their API key was left exposed in frontend JavaScript code, allowing bots to drain their credits. Within 48 hours, they migrated the key to a Cloudflare Worker, a serverless proxy that keeps the key hidden from the browser and adds automatic AI model fallback. Chat history was also moved from browser-local storage to a Supabase cloud database, meaning user conversations now sync across devices and sessions. Row Level Security was implemented at the database level to ensure users can only access their own chat data. The team also automated a referral and ambassador program using database triggers, all built and deployed from a budget Android smartphone.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer open-sources Astro SEO Theme with perfect 100/100 Lighthouse score

A developer has released Astro SEO Theme, a free open-source website template built with Astro, Tailwind CSS v4, and React, aimed at B2B SaaS companies and startups. The theme achieves a perfect 100/100 Lighthouse score across performance, accessibility, best practices, and SEO by shipping zero client-side JavaScript by default. It includes enterprise-grade SEO features such as automatic hreflang tags, JSON-LD structured data, canonical URLs, and auto-generated sitemaps out of the box. The template also supports multilingual routing with English and Spanish implementations, author E-E-A-T profiles, and a strict Content Security Policy configured for Vercel deployments. Developers can scaffold a new project instantly via the Astro CLI, with a live demo available at astro-seo-theme.vercel.app.

0 comments Read more at DEV Community