BCA student at Galgotias University, Greater Noida. Started with a plain HTML page in early 2025, been going deeper ever since.
Every project here came from genuine frustration with tools that didn't exist or didn't work well enough.
Full-stack developer activity tracker log coding sessions, set weekly hour goals, get an AI-generated weekly recap of your progress. JWT auth with bcrypt hashing, a custom SVG activity heatmap, Gemini-powered recaps, and a full test suite (Pytest + Vitest) running in CI on every push. Dockerized for local dev, deployed on Railway (API) and Vercel (frontend).
FastAPI PostgreSQL SQLAlchemy React 19 TypeScript Docker Gemini API
SecureSlot — Backend · frontend repo · live ↗
A concurrency-safe clinic appointment booking API, built around one hard problem: when two patients try to book the same doctor's slot at the exact same instant, exactly one has to win — and it has to be provable, not just claimed. Solved with row-level locking (SELECT ... FOR UPDATE) backed by a database-enforced unique constraint as a second line of defense, verified three independent ways: manual concurrent requests, an automated Pytest regression run in CI, and a k6 load test firing 30 simultaneous bookings at the same slot (100% correct outcome, zero duplicates). RBAC is enforced at the database query level, not just the route — one patient's query can never return another patient's data.
FastAPI PostgreSQL SQLAlchemy Redis Celery Docker k6 GitHub Actions
SecureSlot — Frontend · backend repo · live ↗
Next.js client for SecureSlot. The JWT never reaches client-side JavaScript every authenticated request is proxied through a Next.js route handler that reads the token from an httpOnly, secure cookie server-side and forwards it as a bearer header, so an XSS payload in the page has nothing to steal. The booking screen deliberately surfaces the backend's concurrency control instead of hiding it booking the same slot twice shows the live 201 then 409 response inline.
Next.js 16 React 19 TypeScript TanStack Query Tailwind CSS 4
Backend runs on Render's free tier the first request after idle can take 30–60s to wake up. That's a cold start, not a bug.
Structured code reviews across 22 languages bugs, security issues, and performance problems streamed live with severity badges and fix suggestions. The real engineering was getting Gemini to return consistent JSON across broken inputs, and implementing SSE streaming with proper buffer handling for split chunks.
React TypeScript Vite Gemini API SSE
Enter any GitHub username get a breakdown of how they actually code. Personality type from raw push timestamps, languages weighted by repo KB not repo count, 52-week heatmap in pure SVG. No login needed.
Built because a GitHub profile shows what someone built. I wanted something that shows how they build.
React JavaScript Vite GitHub REST API SVG
Vault Notes — VAPT Project · live ↗ · report (PDF)
Built a notes app securely from scratch, then deliberately reintroduced five real vulnerabilities SQL injection auth bypass, IDOR, stored XSS, plaintext password storage, a hardcoded frontend secret each in its own labeled commit, exploited manually, and written up in a professional-grade pentest report mapped to OWASP Top 10 categories. Unlike a writeup against a pre-built vulnerable app, the secure-vs-broken code is directly traceable in the commit history.
Node.js Express SQLite JWT React TypeScript Postman
Frontend React · TypeScript · Next.js · JavaScript · HTML/CSS · Tailwind CSS · Vite
Backend FastAPI · Node.js · Express · Python · REST APIs
Database PostgreSQL · SQLite · MongoDB
Infra Docker · Docker Compose · Redis · Celery · GitHub Actions (CI/CD) · k6
Deploy Vercel · Railway · Render
Tools Git · VS Code · Postman
Open to internships and collaborations · raghavtripathi4023@gmail.com · LinkedIn · Portfolio