Hi, I'm Dawda Börje Kujabi
Full-stack engineer and cybersecurity specialist. I design and ship APIs, dashboards, and mobile experiences with SvelteKit, TypeScript, Django, and PostgreSQL — then harden and validate them with modern AppSec practice and offensive-tooling literacy.
From CI/CD and containerized deploys to threat modeling and hands-on testing, I connect what runs in production with how it fails — so reliability and security stay aligned.
Projects
Discover my creative and innovative projects, spanning design to development — and see how I can add value to your next endeavor.
CodeGrasp
Privacy-first Rust MCP server: indexes a codebase into SQLite (FTS5) and usearch vectors for hybrid lexical + semantic search. CLI (`cg`) and MCP (`code-gras…
FHIR resources (Rust)
Rust library for FHIR R4/R4B/R5 resource types, JSON serde, and educational disclaimers (not production healthcare).
Medusa
Redis-inspired in-memory key-value store in Rust: TCP server, TTL, hashes, lists, pattern keys—learning project, not production Redis.
SEED
Agricultural data + ML prediction experiments for The Gambia (learning).
Bonita
Svelte + Tauri desktop app: personal server manager to spin up local services.
Interested in collaborating or have a project in mind?
Let's Work TogetherTech Arsenal
Languages, frameworks, data stores, security tooling, and delivery automation I use to take ideas from prototype to production — with observability and tests along the way.
Filter by category to explore the stack, or browse everything at once. Each tile includes a short note on how that tool fits into real projects.
Build & ship
End-to-end web and mobile delivery: SvelteKit and Vite on the frontend, Django and Node on APIs, PostgreSQL and Redis for persistence, and Docker plus CI/CD for repeatable releases.
Secure by design
Threat modeling, hardening, and validation with industry-standard tooling — from traffic analysis to structured assessments — so features ship with security baked in, not bolted on.
Data & scale
Streaming and analytics paths with Kafka and NiFi, search with Elasticsearch, and operations visibility through Prometheus and Grafana when workloads outgrow a single box.
Quality & velocity
Vitest and Playwright for automated confidence, ESLint for consistency, and pragmatic ORMs (Prisma, Drizzle) so schema changes stay safe as the codebase grows.
APIs, automation, scripting, and data-heavy backends
BackendMemory-safe systems tools and performance-critical code
SystemsConcurrent services, CLIs, and cloud-native microservices
Backend.NET APIs, tooling, and desktop-adjacent backends
BackendFlutter logic, async UI patterns, and compile targets
MobileTyped UI, shared contracts, and safer refactors
FrontendBatteries-included web apps, ORM, admin, and auth flows
FrameworkDistributed task queues, retries, and scheduled jobs for Python
BackendRelational modeling, migrations, and robust SQL
DatabaseWide-column storage for scale-out write paths
DatabaseEmbedded stores, local-first apps, and fast prototypes
DatabaseTransactional workloads and classic LAMP-style stacks
DatabaseMySQL-compatible relational engine with open-source roots
DatabaseCaching, sessions, queues, and real-time features
DatabaseFull-text search, log indexing, and analytics queries
DatabaseLightweight desktop shells with web frontends
DesktopReactive UI, SSR, and file-based routing like this site
FrontendFast dev server, HMR, and optimized production bundles
FrontendUtility-first styling and consistent design systems
CSSSemantic markup, accessibility, and SEO-friendly structure
FrontendLayout, motion, and responsive presentation layers
FrontendPacket capture and protocol-level debugging
SecurityWeb app testing, crawling, and manual exploitation
SecurityExploit validation and offensive security labs
SecurityNetwork discovery, port scans, and service fingerprinting
SecurityReproducible images, local stacks, and ship pipelines
DevOpsOrchestration, rollouts, and service networking
DevOpsDeclarative infrastructure across cloud accounts
DevOpsReverse proxy, TLS termination, and static delivery
DevOpsBranching workflows, bisect, and clean commit history
DevOpsCode review, issues, and open-source collaboration
DevOpsEdge deploys, previews, and serverless functions
CloudTyped schemas, selective fields, and BFF patterns
APIContract-first REST specs and generated clients
APIJS runtimes for tooling, APIs, and SSR adapters
BackendType-safe DB access and migration workflows
BackendSQL-first TypeScript ORM with minimal runtime
BackendAuth, realtime DB, and rapid mobile backends
BackendCross-platform UI with native compilation targets
MobileFast unit tests aligned with Vite projects
TestingCross-browser E2E flows and traceable failures
TestingLint rules, consistency, and CI quality gates
TestingStrict node_modules layout and workspace monorepos
ToolsCollections, environments, and API smoke tests
ToolsExtensions, debugging, and remote dev workflows
ToolsMetrics scraping, SLOs, and alert rules
ObservabilityDashboards, panels, and on-call visibility
ObservabilityEvent buses, log pipelines, and stream processing
StreamingAMQP brokers, worker pools, and reliable async handoffs
MessagingVisual ETL and governed data movement
DataServer hardening, systemd, and performance tuning
OSRolling releases and deep control of dev machines
OSGlue scripts, deploy hooks, and automation
ScriptingREADMEs, ADRs, and developer-facing docs
DocumentationVM bring-up, emulation, and lab environments
Virtualization