Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 17 additions & 43 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,12 +1,17 @@
<div align="center">

# ColdByDefault Portfolio · V5.3.18
# ColdByDefault Portfolio · V6.0.1

Modern, secure, high‑performance developer portfolio built with Next.js 16, TypeScript, a strongly hardened edge-first architecture & multi‑locale SEO‑optimized delivery.

<img width="990" height="174" alt="Screenshot 2025-08-31 111906" src="https://github.com/user-attachments/assets/2a863d38-e178-42ee-85a9-75010601fb2b" />

**Live:** https://www.coldbydefault.com • **Docs:** https://docs.coldbydefault.com/ • **Stack:** Next.js 16 · React 19.2.3 · TypeScript 5.x · Tailwind 4.1.12 · shadcn/ui · Embla Carousel · Framer Motion 12.x · next-intl 4.6 · Prisma ORM 7 · Neon PostgreSQL · Zod 4.x · ESLint 9.x · Vercel
- **Live:** https://www.coldbydefault.com
- **Docs:** https://docs.coldbydefault.com/
- **Stack:**
- Next.js 16 · React 19.2.3 · TypeScript 5.x · Tailwind 4.1.12 · shadcn/ui
- Embla Carousel · Framer Motion 12.x · next-intl 4.6 · Prisma ORM 7
- Neon PostgreSQL · Zod 4.x · ESLint 9.x · Vercel

</div>

Expand Down Expand Up @@ -217,13 +222,11 @@ Last internal assessment: 2025‑09 (latest iteration) — no known unresolved c

Implemented Layers (expanded in 4.11.15):

1. Transport & Headers: HSTS, CSP, X-Content-Type-Options, X-Frame-Options (deny), Referrer-Policy, Permissions-Policy.
2. Application: Sanitized inputs, explicit error redaction, avoidance of `eval` / dangerous DOM sinks, reinforced type gates (locale / SEO literal unions) reducing unchecked paths.
3. Operational: Secrets confined to environment variables; repository free of credentials.
4. Abuse Mitigation: IP‑scoped rate limiting on sensitive endpoints with enhanced Zod validation.
5. Dependency Hygiene: Routine audit (npm audit) — zero known CVEs at last scan; periodic verification of transitive packages relevant to security headers & i18n.
6. Automated Security: CodeQL Advanced Security Scanning for JavaScript, TypeScript, and Python with multi-language matrix analysis.
7. Dependency Security: Automated dependency review workflows blocking vulnerable dependencies in pull requests.
1. Transport & Headers: HSTS, CSP, X-Content-Type-Options, X-Frame-Options (deny), Referrer-Policy, Permissions-Policy..
2. Abuse Mitigation..
3. Dependency Hygiene: Routine audit (npm audit) — zero known CVEs at last scan; periodic verification of transitive packages relevant to security headers & i18n.
4. Automated Security: CodeQL Advanced Security Scanning for JavaScript, TypeScript, and Python with multi-language matrix analysis.
5. Dependency Security: Automated dependency review workflows blocking vulnerable dependencies in pull requests.

Security Posture Snapshot:

Expand Down Expand Up @@ -295,40 +298,9 @@ pnpm dev

```

Open http://localhost:3000


**Prisma ORM 7 Notes:**

Prisma 7 introduces a new client generation structure. The generated client exports are now in `client.ts`:

```typescript
// ✅ Correct import for Prisma 7
import { PrismaClient } from "@/lib/generated/prisma/client";
import type { Prisma } from "@/lib/generated/prisma/client";

// ❌ Old import (Prisma 6 and below)
import { PrismaClient } from "@/lib/generated/prisma";

```

---

## 13. Roadmap

**Planned Enhancements:**

* Expand localization (additional languages beyond 5; automated missing key detection)
* Further edge caching tuning & RUM instrumentation (privacy‑preserving)
* Enhanced visual regression / accessibility automation
* Add selective metrics dashboard (anonymized)
* Structured data expansion (Projects, Certifications)
* Advanced chatbot capabilities with memory and context awareness
* Enhanced performance monitoring and optimization tools

---

## 15. License & Intellectual Property
## 13. License & Intellectual Property

Copyright © 2026 ColdByDefault. All rights reserved.

Expand All @@ -344,15 +316,17 @@ Refer to `LICENSE` & `COPYRIGHT` files for formal wording.

---

## 16. Contact
## 14. Contact
Portfolio: https://www.coldbydefault.com

Documentation: https://docs.coldbydefault.com/

For professional or security inquiries, reach out via the official channels listed above.
_P.S. If you find any bugs, they're not bugs - they're undocumented features!_

---

## 17. Special Thanks
## 15. Special Thanks

<div align="center">

Expand Down
2 changes: 1 addition & 1 deletion app/(legals)/impressum/page.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -99,7 +99,7 @@ export default async function Impressum() {
<p className="text-sm text-muted-foreground">
{t("vat.description")}
</p>
<p className="text-sm font-medium mt-2">{t("vat.value")}</p>
<p className="text-sm font-medium mt-2">{t("vat.value")} Will be provided soon</p>
</CardContent>
</Card>

Expand Down
29 changes: 29 additions & 0 deletions app/admin/blocked/page.tsx
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
/**
* @author ColdByDefault
* @copyright 2026 ColdByDefault. All Rights Reserved.
*/

import { Shield } from "lucide-react";
import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";

export default function AdminBlockedPage() {
return (
<div className="min-h-screen flex items-center justify-center p-6">
<Card className="w-full max-w-md">
<CardHeader className="text-center">
<div className="mx-auto mb-4 w-16 h-16 rounded-full flex items-center justify-center">
<Shield className="w-8 h-8 text-red-600" />
</div>
<CardTitle className="text-2xl text-red-600">
Access Blocked
</CardTitle>
</CardHeader>
<CardContent className="space-y-4 text-center">
<p className="text-gray-700">
Nuh you ain&apos;t support to be doing this... NOW BANNNN!.
</p>
</CardContent>
</Card>
</div>
);
}
Loading
Loading