SShortSingh.
Back to feed

Silent stubs and dead code: why 'which parts are real' must have a clear answer

0
·2 views

A software engineer working on a private deployment platform discovered that a system had been confidently answering queries for weeks without throwing a single exception or failing any test. The root cause was a pattern of silent fakes: a database column never written to, a complete access-review model with zero application references, and drivers that returned null without any documented intent. The investigation revealed that different infrastructure providers cannot honestly answer the same question the same way, making a blanket fix impossible. Instead, the engineer pinned deliberate nulls in tests with explicit comments, converting unexplained absences into documented decisions. The broader takeaway is that fake or stub components are valid for incremental shipping, but the system must make it enumerable and obvious which parts are real versus placeholder at any given time.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Laid-Off Developer Builds AI Tools to Automate Resume Scoring and Job Filtering

A developer laid off several months ago created two reusable Claude Code skills to streamline their job search after repeatedly spending too much time evaluating listings and keeping resumes updated. The first tool, /score-job, reads a job description alongside multiple personal resume files and produces a structured scorecard covering fit, gaps, strengths, and tailored resume bullets. The second tool, /resume-sharpener, is designed to mine patterns across scored listings to surface recurring gaps and improve resume content over time. Both tools are built as markdown-based skill files that Claude Code can invoke via slash commands, re-reading source documents fresh on every run to reflect updates. The developer also built in a dual-scoring mode for roles involving a career pivot, showing honest fit against both their current track record and their intended new direction.

0
ProgrammingDEV Community ·

Software Marketplaces Fail Developers by Hiding Critical Technical Details

A analysis published on DEV Community argues that most software marketplace listings are inadequate for developers evaluating source-code purchases, as they prioritize marketing visuals over technical substance. Two listings can appear nearly identical in features and screenshots yet differ vastly in code quality, with one running a modern, well-maintained stack and another built on abandoned dependencies and outdated runtimes. The author highlights that key details like framework versions, PHP or Node.js versions, and dependency trees are rarely disclosed, forcing buyers into costly technical debt from the start. A generic 'last updated' timestamp is also criticized as misleading, since it reveals nothing about whether the change was a security fix, a framework upgrade, or merely a description edit. The piece calls for standardized, developer-focused listing information including dependency files, version histories, and structured changelogs to help buyers make informed decisions.

0
ProgrammingDEV Community ·

7 Security Checks Developers Must Run Before Shipping AI-Generated Next.js Apps

AI coding assistants can rapidly generate functional Next.js and Supabase applications, but the generated code often carries hidden security risks around credentials, authorization, and data access. Developers are advised to audit repositories and client bundles for exposed secrets, including service-role keys that should never appear in frontend code or Git history. Every API route and server action must verify user identity server-side, as hiding UI elements does not substitute for proper authorization. Supabase Row Level Security policies should be tested thoroughly to confirm that one user cannot read or modify another user's data. Additional checks include validating all external inputs with schema validators, enforcing rate limits on sensitive operations, and configuring CORS policies deliberately to avoid unintended credential exposure.

0
ProgrammingDEV Community ·

Why 7:45 Is Not 7.45 Hours: The Math Behind Timesheet Decimal Conversion

Converting time from hours-and-minutes format to decimal hours is a common requirement in payroll, billing, and project management systems. The correct formula divides minutes by 60 and seconds by 3600, then adds the result to the whole hours — so 7 hours 45 minutes equals 7.75, not 7.45. A frequent error occurs when people treat the minutes portion as a decimal directly, which leads to miscalculations in cost and billing reports. The reverse conversion is equally straightforward: multiply the decimal portion by 60 to recover the minutes. For teams handling large datasets, using a dedicated calculator or spreadsheet formula reduces manual errors and speeds up timesheet processing.