Currently at Schrader
OWASP · Sugar Labs · FaceGate
Tools with a job to do
WeMakeDevs × AWS Environmental Hacks · in progress
Clones any public repo and reports code, infra, logging and LLM patterns that waste compute, with the exact line as evidence. I wrote 45 of its ~120 detectors and the AWS scan API.
Proving waste from static evidence alone, never running the scanned code, and making detectors written in Python and TypeScript by four people pass one shared contract.
Grand Finale winner, India Innovates '26
Civic grievance platform for Delhi, running as a ward pilot. 300+ users, all organic from X, Reddit and campus. Complaints come in through a Gemini chatbot, a web form or WhatsApp and go to one of 10 authorities against an SLA.
Catching duplicate complaints within 20 m with PostGIS before they're filed, scoring 250 ward polygons live, and escalating overdue tickets inside Postgres instead of app code.
Dispatch decision support for Indian Railways on a simulated 437 km Delhi–Kanpur corridor. Cuts cascade delay by 10% against first-come-first-served dispatch.
A beam-search lookahead (depth 4, width 8) that plans train conflicts in under 200 ms, behind a safety layer that rejects any unsafe plan.
A terminal client for Oracle Academy's Student Hub: sign in once via SSO, then list classes and work through sections from the CLI.
Oracle's edge blocks headless Chromium, so it keeps one real browser alive over CDP, imports cookies from your browser (including Chrome's App-Bound Encryption on Windows), and falls back to Docker with noVNC.
1st Place, InnovateNSUT '26
Civic issue reporter for Delhi and the prototype that became JanSamadhan. I built the role logic, citizen and authority dashboards, and the chat assistant's backend.
Routing free-text and spoken complaints to the right department, using Groq for classification and Google Speech for voice input.
Backend & full-stack developer. Second year of CS at Manipal University Jaipur.
I build client websites at Schrader, a digital marketing agency in Michigan, and contribute to open source in my spare time, including OWASP, Sugar Labs and FaceGate.
Most of my own projects are civic tools for Delhi. The latest, JanSamadhan, routes complaints to 10 city authorities and won the India Innovates '26 grand finale.
On the deskWriting compute-waste detectors at WeMakeDevs × AWS Environmental Hacks. Fixing bugs in OWASP cve-lite-cli.
Python · FastAPI · Node.js · PostGIS · Supabase · Redis
TypeScript · React · Next.js · Vite
AWS Lambda · API Gateway · S3 · Docker · Playwright
Jul 2026 – Present
Web Developer
Traverse City, Michigan · Remote
Security tooling. Music education. A safer desktop.
A few places where I’ve left the code better.
24 merged PRs across these three upstream projects · all time
Dependency vulnerability scanner for JS/TS projects
The usage scanner silently stopped at 5,000 files, so --only-used could hide real vulnerabilities. It now flags the cut-off and keeps those findings.
Before this, a vulnerable repo could scan green.
Fixed the semver check that four rules depend on: ^0.25.0 was matching every 0.x release instead of following npm's 0.x rule.
It was reporting vulnerable versions npm could never install.
HTML reports printed fix commands relative to wherever the report was generated. They're now relative to the scanned project, so they actually run.
Compact mode showed three findings without saying more were hidden. It now states how many and how to see them.
Replaced 39 hard-coded CLI flag strings with constants, so a typo is a compile error instead of a silently ignored flag.
Merged seven copies of the flag-conflict error message into one helper.
Added braces to the last 11 single-line if statements in the CLI.
Fixed a pluralization bug in OA008 messages and sorted versions numerically instead of alphabetically.
Wrote the docs page for the OA010 Vulnerable Floor override rule.
Visual programming for music, used in classrooms
Added Duplicate: copies a brick and everything attached below it into a new, independent tower, with undo and redo.
Clicking empty workspace didn't clear the selection, because a pan layer was swallowing the click. Fixed it and wrote a test that actually catches it.
The old test clicked the canvas directly, so it passed while the bug was live.
Dropping a dragged brick left it selected, because the drag ended with a stray click. That click is now ignored.
Moved the drag-click guard, copied in three places, into one shared hook after review feedback.
Nested bricks with thick outlines were drawn too wide. Fixed two width formulas in the SVG path.
Face ID app locker for macOS
Shipped v1.3.0: the lock window is now reused instead of rebuilt, which fixed camera drops and a memory leak.
Rapidly locking and unlocking could bypass face authentication.
Shipped v1.3.1: fixed duplicate Touch ID prompts on multiple monitors, locked apps flashing before the lock screen, and a frozen overlay traced to cleanup running out of order.
Rapid lock cycles could leave the camera stopped on a black screen. Camera start and stop now run in order on one queue.
Added a setting to disable the emergency quit shortcut, so the app can't be killed by hotkey without authenticating.
Featured contributions are hand-picked; merged status, counts, and stars are verified through GitHub. Refresh details below.
From an open-source reviewer
“Thanks, and the work has been consistently good.”
28 Oct 2025 — 27 Oct 2026
prx-myUse arrow keys to explore days. Left and right move one week; up and down move one day. Home and End go to the first and last day. Tab leaves the calendar.
1 contribution on 27 October 2026
Use arrow keys to explore days. Left and right move one week; up and down move one day. Home and End go to the first and last day. Tab leaves the calendar.
0 contributions on 2 May 2026
Use arrow keys to explore days. Left and right move one week; up and down move one day. Home and End go to the first and last day. Tab leaves the calendar.
1 contribution on 27 October 2026
Calendar totals follow GitHub’s contribution visibility and may include private activity as anonymous counts. Dates use UTC. PR totals include public repositories only.
Showing the last verified snapshot ·
JanSamadhan
Leafline
Selected for incubation after the demo
B.Tech, Computer Science & Engineering
SGPA 8.45 · Jaipur
Class XII, CBSE (PCM + Computer Science)
91% · Silvassa
Hiring a backend or full-stack developer? Have a project in mind? I’m open to full-time roles, freelance work, and interesting collaborations.
Book a callprakhar06.work@gmail.comBefore you go
Thanks for spending a little time in my corner of the internet.
51curious minds have passed this way.
A little proof you were here.