Full-stack engineer and independent security researcher. I read source, find real reproducible bugs, and ship minimal, tested fixes upstream.
- Security research and open-source contributions: research.itsjustin.me
- Also on Codeberg: codeberg.org/thejdubb02
I ship production software by directing AI agents, and make the architecture and security calls myself. I run a small development studio, Willhite Strategy Group. Before this, nine years at Twitch (Amazon) running creator and marketing programs.
I am open to contract work. Paid secure code review and vulnerability fixes are on Fiverr.
26 merged pull requests across 10 open-source projects that together hold more than 131,000 GitHub stars. A few:
| Project | Contribution |
|---|---|
| github/github-mcp-server | Clear errors for missing owner/repo/issue arguments in the Copilot assignment tools |
| alibaba/open-code-review | Honor the configured request timeout in the OpenAI client |
| dgtlmoon/changedetection.io | Fix the Browser Steps selector so it can target a nested dropdown |
| snapotter-hq/SnapOtter | Stop self-hosted instances sending analytics to a third party |
| autobrr/qui | Serve a static favicon so background tabs render |
Full list of merged work: research.itsjustin.me.
White-box source review of open-source software, focused on access control and IDOR, SSRF, and injection, disclosed responsibly through each project's advisory channel. Contact for coordinated disclosure: jdubb@commquest.io.
- clique: folder-organized, CLI-agnostic coding sessions in a browser, kept alive in tmux. Python, zero dependencies.
- my-glp-shot: privacy-first GLP-1 tracker with end-to-end encryption in the browser, so the server never sees plaintext.
- claude-kit: portable Claude Code kit of skills, commands, and hooks.
- rampart: native desktop admin for Stalwart mail and server management.
Python (Flask, FastAPI), TypeScript and vanilla JS, SQLite and Postgres, Docker, Nginx, Linux. Stdlib-first when the product should still boot in two years.
itsjustin.me 路 research.itsjustin.me 路 Codeberg 路 LinkedIn 路 X @JDubbTV 路 ORCID