DevLazar
Sheet 1 of 4 · General arrangement · Niš, Serbia

Software built to survive its own launch.

I'm Lazar. Six years of backend and product engineering for banks, hospitals and insurers, now a one-man shop in Niš that takes a few commissions at a time.

NestJS · Next.js · PostgreSQLLLM integration into existing systemsAWS · Hetzner · TerraformClients abroad · CET
Fig. 1 · A system that survives its launch
Scale 1:1 · ISO 30° · Hover or tap to explode
06 · INFRAAWS OR HETZNER · TERRAFORM · DOCKER05 · DATAPOSTGRESQL · REDIS04 · QUEUEBULLMQ · RETRIES · DEAD LETTERS03 · AILLM GATEWAY · EMBEDDINGS · EVALSADDED TO THE EXISTING SYSTEM · NO REBUILD02 · APINESTJS · AUTH · RATE LIMITS01 · CLIENTNEXT.JS · REACT · TYPESCRIPT6 LAYERS · EACH ONE STANDS ON ITS OWNNOTE 1 · ISOLATED LAYERS · HOLDS UNDER LOAD, RECOVERS ON ITS OWN
Project
lazarstankovic.dev
Drawn by
L. Stanković
Company
DevLazar
Availability
Open
Latest note
Sixteen CVEs in the Plumbing: Node.js Patches Its HTTP/2 and TLS Stack
Sheet 2 of 4 · Lab notes

Essays, tutorials, and the weekly Wire.

Note 075
The Wire · Tooling · Nov 12 · 7 min
Sixteen CVEs in the Plumbing: Node.js Patches Its HTTP/2 and TLS Stack

Node.js 26.13.1, 24.22.3 and 22.23.5 shipped November 11 with 16 fixes, seven rated High, led by an HTTPS heap leak and an HTTP/2 crash. Who is exposed, who a proxy shields, and how to upgrade.

Read →
Note 074
The Wire · Tooling · Nov 12 · 7 min
The Commit That Wasn't There: Inside the wfx Raid on GitHub Actions Secrets

Since November 10, hijacked GitHub accounts have pushed a CI secret stealer to default branches and reverted it within seconds. How it hid, where the counts disagree, and what to check today.

Read →
Note 073
The Wire · AI · Nov 12 · 6 min
DeepMind Ships a Factory Robot Brain and a Cell-Aware Genome Model, and Only One Has an API

Gemini Robotics 2.5 (November 10) and AlphaGenome 2 (November 11) arrive with large, Google-run numbers. The genome model is callable today for non-commercial research; the robot model reaches partners only.

Read →
Note 072
The Wire · Infra · Nov 11 · 16 min
Vercel, Netlify, Cloudflare, Coolify, Dokploy: The Limits, the Meters and the Monthly Bill

CPU caps, memory ceilings, build limits and egress rates for five deploy targets, from their own docs as of November 11, 2026, plus two worked monthly bills. The meters differ more than the sticker prices.

Read →
Note 071
The Wire · AI · Nov 11 · 7 min
Gemini 4 Carbon Goes on Sale: Frontier Scores at Argon's Price

Google opened Gemini 4 Carbon to paying API developers and AI Ultra subscribers on November 10: $2/$10 per million tokens until November 30, then $4/$20, a photo-finish CursorBench lead, and a Signal proof run.

Read →
Sheet 3 of 4 · On the bench

Things I build for myself.

Small products shipped under my own name. Each one is a test rig for the shop and a source of notes.

Mk I · Mobile
Low Bar

A habit tracker that sets the bar low on purpose. Show up, mark the day, keep the streak honest.

Pre-launch
Mk I · Dev tools
Deslopping

Proof that an engineer read the AI-written code before approving the pull request. Comprehension, not vibes.

In progress
Mk I · SaaS
Bookleys

Booking and client memory for service professionals. The calendar that remembers who people are.

Exploring
Sheet 4 of 4 · Work

DevLazar.
One engineer, three stations.

Lazar Stanković PR DevLazar · Clients abroad

The company behind the work. Custom software, MVPs on a deadline, and backend systems that have to hold when the traffic arrives. Everything leaves the shop with drawings.

Station 01
Proof of concept, MVP, product
Built fast with AI to a working POC in days, then the MVP in weeks, then the full product. Each stage scoped to survive the launch.
Station 02
Backend architecture and scale
Pipelines, auth, APIs under high-frequency load. Monthly retainer.
Station 03
Launch Survival Audit
A fixed-price inspection before your system meets its users.
Build logs · SelectedMost of the file is under NDA · Stamped by what can be said
Log 01Sector only
Media and publishing, NDA protected
React CMS features and the Node.js and NestJS APIs behind them, owned from requirements to release.
Log 02Sector only
Logistics and warehouse management, NDA protected
A React admin interface, Next.js pages and NestJS APIs, with hosting and CI/CD set up on Hetzner and GitHub Actions.
Log 03Sector only
EdTech, NDA protected
React applications and NestJS services for multiple users and organizations, including an AI-driven learning content management system.
Detail A · The engineer
Fig. 7Lazar Stanković · Owner / Operator

An engineer who writes things down.

I have built for banks, hospitals, insurers and sensor networks. Most of it I cannot show you. All of it taught me something, and the lessons are not under NDA.

Now
→Shipping custom software with a small crew I trust.
→Reading Seneca on the morning commute.
→Learning Rust, one crate at a time.
General notes
Note 1Perfect systems do not survive contact with reality. Resilient ones do.
Note 2 · Do not scale drawing. Note 3 · All dimensions in weeks unless stated.
Weekly · Free
The Wire.

One letter a week on AI infrastructure, shipping on a deadline, and the craft of building things that last. No noise, no sponsors you did not ask for.

Free. Unsubscribe in one click.