| Thribhuvan. I fix bugs in the tools I build with — upstream, when needed. | Portfolio · LinkedIn · Email |
|---|
I build multi-tenant products that handle real payments and real user data — the kind of work where a broken edge case actually costs someone money.
Outside of code: I read Vedanta and listen to classical music.
- Built Tray, a UPI ordering system for street stalls and campus canteens — multi-tenant, idempotent Razorpay capture, Postgres row-level security
- Built TrustGrade, an AI-assisted code grading platform — a Postgres trigger blocks any AI answer from publishing without teacher approval, student code runs in disposable network-less containers
- Built Unhold, a tool that drafts the letters needed to release a frozen bank or UPI account — OCR intake with PII redaction
- Built AquaVision, underwater image restoration that runs on CPU, benchmarked on a fixed test set
- Landed 14 merged pull requests across 11 upstream projects in seven weeks — Svelte, Prisma, SolidJS, SvelteKit, Supabase, Nitro, Refined GitHub, WXT, Music Blocks, and react-jsonschema-form — reviewed and merged by their maintainers, several by the people who created the framework
Currently working on Tray, TrustGrade, and Unhold, and preparing for SDE interviews with DSA practice on LeetCode, CodeForces, and CodeChef.
14 pull requests, 11 projects, 4 July – 20 August 2026. Each row links the PR.
| Project | Reach | What I fixed | Merged by |
|---|---|---|---|
| Svelte · #18521 | 🌟 87.9k · 5.2k forks 5.3M installs/wk |
Keyed {#each} blocks with computed destructuring keys compiled to undefined variables and crashed at runtime |
@dummdidumm Svelte core team |
| Prisma · #29701 | 🌟 47.6k · 2.5k forks 15M installs/wk |
Bytes fields decoded as views into Node's shared Buffer pool, exposing bytes from other values in the same query |
@aqrln Prisma core engineer |
| SolidJS · #2875 | 🌟 35.8k · 1.1k forks 3.5M installs/wk |
@solidjs/web/storage shipped types at a path the package never advertised, breaking downstream type-checking |
@ryansolid creator of SolidJS |
| Refined GitHub · #9777 | 🌟 31.9k · 1.9k forks 100k+ users |
Conventional-commit labelling silently failed for capitalized types (Fix, Feature); made matching case-insensitive |
@fregante author of Refined GitHub |
| SvelteKit · #16329 | 🌟 20.7k · 2.3k forks 2.4M installs/wk |
Route exports written as destructured declarations were invisible to type generation | @Rich-Harris creator of Svelte |
| react-jsonschema-form · #5150 | 🌟 15.9k · 2.3k forks 1.2M installs/wk |
Empty-string titles in oneOf/anyOf were discarded, so intentionally blank labels fell back to defaults |
@heath-freenome rjsf maintainer |
| Nitro · #4422 · #4412 | 🌟 11.1k · 886 forks 2M installs/wk |
Vercel skew-protection cookies shipped without SameSite=Lax, dropping the deployment pin on cross-site navigation; prerendered routes ending in a slash emitted Build Output overrides Vercel silently refuses to match, so they fell through to the serverless function instead of being served statically |
@pi0 Nitro lead maintainer |
| WXT · #2486 · #2485 | 🌟 10.4k · 558 forks 550k installs/wk |
i18n consumed mustache {{tokens}} as substitutions; added a \{ escape and replaced a lookbehind regex with a single-pass parse that benchmarked faster than main |
@aklinker1 creator of WXT |
| Supabase JS · #2537 | 🌟 4.5k · 715 forks 25M installs/wk |
StorageApiError swallowed the service error code, forcing callers to string-match messages; the Storage team shipped the server half alongside it |
@mandarini Supabase core |
| Supabase SSR · #258 | 🌟 205 · 30 forks 6.8M installs/wk |
Cookie-deletion ordering left signOut() unable to clear a domain-scoped session, so users stayed logged in after signing out |
@mandarini Supabase core |
| Music Blocks · #7727 · #7731 | 🌟 864 · 1.7k forks GSoC org |
Importing legacy Turtle Blocks projects crashed the editor; numerically-labelled blocks had names corrupted on import | @walterbender Sugar Labs co-founder |
Install counts are weekly npm downloads for the package each fix ships in.
In review: Firecrawl · Knip · Directus · Skyvern (approved) · Svelte