Why C# Records Outperform Mutable Classes for DTOs in Modern .NET Apps

·1 views

A technical analysis argues that mutable C# classes with settable properties are the wrong choice for Data Transfer Objects (DTOs), a practice that has persisted since .NET Framework 2.0. Since C# 9 introduced records, developers have had a structurally immutable alternative better suited to representing data snapshots passed across system boundaries. The article draws on fintech and banking use cases — including payment processing and reconciliation workflows — to illustrate how mutable DTOs can cause real production failures such as duplicate payments and corrupted audit trails. Records enforce immutability by design, preventing unintended mutations as objects travel through validation, fraud screening, and other async pipeline stages. The piece targets engineers at all levels, making the case that records should be the default choice for any DTO in clean, principle-driven .NET development.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Revera 1.0.0 Launches with Bayesian Engine to Score npm Package Security Risk

A developer has released revera version 1.0.0, upgrading the tool from its earlier 0.1.0 beta to a stable release. Revera is a command-line interface designed to assess the security risk of npm packages before they are installed. The major rewrite replaces the previous fixed-weight scoring system with a Bayesian evidence engine that dynamically determines weights based on real signals. Each package is evaluated across eight categories — including vulnerability feeds, publisher trust, GitHub activity, and typosquat detection — and risk scores propagate through the entire dependency tree rather than just the top-level package. The tool is publicly available and can be installed via npm.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer finds site advertised rate limits for months with no enforcement code

A developer discovered that their Cloudflare Worker had been sending RateLimit headers on every response, promising a cap of 100 requests per 60 seconds, while no actual limiting logic existed anywhere in the codebase. The flaw meant no 429 responses were ever returned, and any well-behaved automated agent trusting those headers would have unnecessarily throttled itself against a non-existent limit. The bug surfaced during an internal audit while the developer was preparing answers to tough questions about the site's own agent-readiness standards. A fix was implemented using Cloudflare's Workers rate limiting binding, keyed to client IP, which now enforces the same 100-requests-per-60-seconds limit the headers had long advertised. The developer noted a key limitation: because the site has no accounts or logins, IP-based keying is the only option, meaning multiple users sharing a proxy or NAT address share a single request budget.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

XHS Data API Offers Async Batch Processing for Up to 50 Xiaohongshu Notes

Developers working with Xiaohongshu note data can now use an asynchronous batch workflow via the XHS Data API on RapidAPI to process up to 50 public note URLs without holding a single gateway request open. The workflow involves submitting URLs to an async endpoint, receiving a job ID, and polling for results until the status reaches succeeded, partial, or failed. Jobs process URLs sequentially, can survive service restarts, and automatically expire after 24 hours. Per-item results are preserved even if individual URLs in a batch fail, allowing partial successes to be retrieved. Developers are advised to keep API authentication server-side, avoid using job IDs as authorization tokens, and ensure all data use complies with applicable laws and platform rules.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Python Tutorial Shows How to Fetch Public Xiaohongshu Note Data via RapidAPI

A new developer tutorial demonstrates how to retrieve structured public note data from Xiaohongshu, also known as RedNote, using Python and the XHS Data API on RapidAPI. The guide requires a RapidAPI subscription key and a valid public note URL containing an xsec_token, both stored as environment variables. Two API endpoints are used: one to parse and validate the URL locally, and another to fetch full note details including author info, images, tags, engagement counts, and media metadata. Developers are advised to use media URLs promptly as they may be signed or temporary, and to retain request IDs for error handling and retries. The XHS Data API is an independent service with no affiliation to Xiaohongshu, and users are reminded to handle public data in compliance with applicable laws and platform rules.

0 comments Read more at DEV Community