Skip to main content

MWMatthews WongSoftware Engineer

Experience Education

Products I build and run

AI GymBro

AI GymBroFreeTell it your goal and it writes the workout split and the meal plan — no account, no credit card.Visit site

Qilap

QilapB2BSandbox readyCrew log jobs from the bay on mobile; the admin side runs the counter, the cash and the reports. A sandbox is open to try.Visit site

Projects Certifications Blog

How the work actually goes

The Archipelago3D gameWalk through the work as a game Case StudiesReal problems, measurable outcomes HackathonsWhat I shipped against a deadline Open SourceRepos, npm packages & the plugin marketplace How This Site WorksThe stack and decisions behind this site

MWMatthews WongSoftware Engineer

Home Experience Education

AI GymBro

AI GymBroFreeTell it your goal and it writes the workout split and the meal plan — no account, no credit card.Visit site

Qilap

QilapB2BSandbox readyCrew log jobs from the bay on mobile; the admin side runs the counter, the cash and the reports. A sandbox is open to try.Visit site

Projects Certifications Blog

The Archipelago3D gameWalk through the work as a game Case StudiesReal problems, measurable outcomes HackathonsWhat I shipped against a deadline Open SourceRepos, npm packages & the plugin marketplace How This Site WorksThe stack and decisions behind this site

Let'sCollaborate

Software Engineer & ERP Developer. Open to freelance work and full-time roles — let's build something that ships.

matthewswong2610@gmail.com

© 2026 Matthews Wong. All rights reserved.

Home Blog Play Contact

Home
Thoughts & Stories

Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (139)AI & LLMs (102)Web Development (81)ERP Systems (72)Backend & APIs (60)Software Development (52)Security (28)Career Reflections (27)Cloud (15)Product & SaaS (12)AI / Machine Learning (5)University (1)Hackathons (1)

Categories

June 20259 min read

OpenAPI and Swagger in NestJS: Auto-Generated Docs That Stay Accurate

How to set up @nestjs/swagger so your API documentation is generated from code and never goes stale — with the decorator patterns I use.

June 20259 min read

Environment Variables and Secrets in Next.js: What Goes Wrong and How to Fix It

The rules for NEXT_PUBLIC_ vs server-only variables, how to validate at startup, and the secrets management setup I use in production.

June 202510 min read

E2E Testing Next.js Apps with Playwright: Setup, Patterns, and CI Integration

How to set up Playwright for a Next.js app, write tests that don't break on every deploy, and run them in GitHub Actions CI.

June 202510 min read

Accessibility Audit for Next.js Apps: Automating WCAG Compliance

How to audit Next.js apps for accessibility issues using axe-core and Playwright — with the workflow that catches 57% of WCAG violations automatically.

June 20259 min read

npm Dependency Management and Security Auditing: What I Actually Do

How to audit npm dependencies for vulnerabilities, manage update debt, and protect your project from supply chain attacks.

June 202510 min read

Security Headers in Next.js: The Config I Actually Ship

The complete security headers configuration for Next.js — CSP, HSTS, X-Frame-Options, and the nonce-based approach for inline scripts.

Showing 433–438 of 595 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications