Niranjan Gain

Live Indian-Railways train-status REST API. Replaced a $5K/year enterprise contract with a $5/month VPS using Hono + Playwright, dual-source resilience, and senior-grade ops on a personal project.

Personal project · sole author · public on GitHub

• ▸ Single global Chromium pool with isConnected() guard + lazy crash-recovery — saves ~3s and ~400MB per request
• ▸ Intercepts upstream internal JSON API instead of brittle DOM scraping; ConfirmTkt DOM fallback for uncorrelated failure modes
• ▸ Aggressive resource blocking (ads, trackers, images, fonts) drops ~70% of requests; domcontentloaded wait viable
• ▸ Graceful SIGINT/SIGTERM closes Chromium before exit — prevents zombie processes under PM2 autorestart
• ▸ Active migration to AWS: ECS Fargate + ElastiCache + BullMQ + EventBridge webhook callbacks (Project A)

Four-module e-commerce stack for a D2C ethnic-wear brand — storefront, headless backend, CMS, and mobile app with live shopping. Senior-grade CI/CD on Hetzner.

Sole / principal engineer · ex-employer Shree Shivam Attires Pvt Ltd

• ▸ 3 GitHub Actions workflows with immutable commit-SHA Docker tags pushed to GHCR; two-step Dokploy API deploy with OWASP least-privilege scopes
• ▸ Production hardening: fail-fast at boot — rejects weak JWT secrets, requires Redis in prod for multi-pod webhook idempotency
• ▸ Razorpay + Cashfree fallback with Redis-backed event-ID idempotency keys — zero double-fulfillments since launch
• ▸ Mobile app on Expo SDK 54 with live shopping via expo-video + Cashfree-pg in-app payments + Sentry crash funnel
• ▸ Programmatic SEO via Directus Flows: 8 schema.org types including Speakable + GEO/AI-native patterns

Instagram-live shopping companion — viewer count, push-to-cart, lightweight admin. Right-sized stack: SQLite over Postgres because the workload didn't justify the upgrade.

Sole / principal engineer · ex-employer Shree Shivam Attires Pvt Ltd

• ▸ Picked SQLite over Postgres after mapping the workload — single-writer, read-heavy, no cross-region needs. Postgres would have been ops burden with zero capability gain
• ▸ Custom JWT + bcrypt auth middleware (no Auth0/Clerk) — wrote the bouncer myself, with explicit token rotation and revocation
• ▸ PWA-installable for Instagram in-app browser quirks; service worker for offline shell
• ▸ Zero-downtime deploys via rsync cutover + PM2 ecosystem reload

Multi-tenant phone-monitoring SaaS with multi-campaign automation. Tenant isolation enforced at the database layer via Supabase RLS — defense-in-depth, not app-level filtering.

Sole / principal engineer · ex-employer Shree Shivam Attires Pvt Ltd

• ▸ Row-Level Security policies per campaign — even a buggy app query cannot leak across tenants
• ▸ cron-parser-driven scheduler with idempotent job execution + webhook ingestion API
• ▸ End-to-end zod validation: form schemas resolve through to Postgres column types
• ▸ Recharts dashboards with server-driven aggregations