Every published module, all in one place.
130 modules
AI Behavior → Agent Etiquette
How an AI coding agent should behave in a real codebase: ask before destructive actions, stay in scope, never fabricate, and know when to stop.
by @markdowners
Auth → Other
Core authentication rules every login system needs: password hashing, session revocation, verification, and the line between authentication and authorization.
Database → Schema Design
Schema fundamentals that prevent the expensive-to-fix mistakes: keys, constraints, normalization, correct types, and indexing discipline.
Study & Research → Summarization
Rules for summarizing a document or multiple sources faithfully: length targets, fidelity to the source, structure, and exact preservation of numbers and quotes.
Auth → Email Password
The email+password login flow specifics built on auth-fundamentals: signup verification, login timing safety, and password-change session rules.
Project Setup → Env Secrets
Rules for keeping credentials out of git, out of client bundles, and rotatable — so a leak is an inconvenience, not a breach.
Project Setup → Error Handling
How to fail loudly in development, gracefully in production, and always leave a diagnosable trail instead of a silent or generic failure.
UI & Frontend → Forms
How to validate forms so errors are clear, input is never lost, and client-side checks never substitute for real server-side validation.
Design & Art → Image Prompts
How to structure image-generation prompts that produce consistent, controllable results: subject/style/composition/lighting, negative prompts, iteration, and an ethics note on artist names.
Social & Marketing → Linkedin
Rules for writing LinkedIn posts that actually get read: the first-two-lines hook, length bands, formatting, hashtag discipline, CTAs, and repurposing long content.
Business Docs → Meeting Notes
A capture format for meeting notes that separates decisions from actions from open questions, so notes are usable minutes rather than a transcript nobody rereads.
SEO & Growth → Meta & OG Tags
The exact meta, Open Graph, and Twitter Card tags every public page needs, and how to generate them correctly for dynamic pages.
Database → Migrations
How to change a live schema safely: backward-compatible rollout steps, no same-migration drops, and lock-aware changes on large tables.
Frameworks → Next.js
App Router conventions: server-vs-client component defaults, safe env-variable exposure, and where data fetching and mutations belong.
Auth → Oauth Social
The OAuth/social-login handshake done correctly: PKCE, state validation, safe token handling, and account-linking without takeover risk.
Payments → Other
Foundational rules for handling money safely: server-side pricing authority, idempotent charges, integer currency math, and staying out of PCI scope.
Payments → Paypal
PayPal-specific order/capture rules on top of payment-system-basics: server-side capture verification, idempotency, and sandbox testing.
Database → Mysql
PHP + MySQL conventions on top of database-design-basics: prepared statements, utf8mb4, InnoDB, and PHP's shared-nothing request lifecycle.
Database → Postgres
PostgreSQL-specific conventions on top of database-design-basics: naming, precise types (citext/jsonb/timestamptz), and RLS basics.
SEO & Growth → Programmatic Seo
The extra bar template-generated pages must clear: genuine per-page uniqueness, real underlying data, and crawl-budget-aware scale.
API & Backend → Rate Limiting
Which endpoints need explicit abuse budgets, how to choose limits per identity axis, and how to respond to breaches without leaking exploitable detail.
UI & Frontend → Responsive
Mobile-first layout rules for interfaces that hold up from a 360px phone to a 1920px desktop without horizontal scroll or broken touch targets.
SEO & Growth → Technical Seo
The baseline technical and content rules that make pages crawlable, indexable, and worth ranking, before any advanced SEO tactic.
Auth → Sessions
Keeping an established session safe for its whole lifetime: cookie flags, revocation, CSRF defenses, and concurrent-session visibility.