WitsCode @info_witscode

Product engineering studio. MVPs, SaaS, marketplaces, AI agents. Fixed price before work. Weekly demos. We take AI-built apps to production. Est. 2019, Chennai. witscode.com Chennai, India Joined September 2025

Tweets

172
Followers

1
Following

87
Likes

122

WitsCode @info_witscode

2 hours ago

Before launch, build your frontend and search the output folder for service_role, sk_live and secret. If any of them show up, that key is public. Move the call to a server route or edge function and rotate the key today.

0 0 0 2 0

View Details

WitsCode @info_witscode

6 hours ago

Baymard averages 50 studies and gets a 70.22% cart abandonment rate. You can't fix all of that. But the top reason in their survey is fixable: extra costs like shipping, tax and fees showing up late (40%). Show them on the product page. baymard.com/lists/cart-aba…

0 0 0 7 0

View Details

WitsCode @info_witscode

9 hours ago

Meta and Shopify rarely agree on how many sales your ads drove. Triple Whale tracks orders with its own pixel and puts your store, ads and customers in one dashboard. There's a free plan. Know first: paid plans are priced by GMV on 12-month terms. triplewhale.com

0 0 0 8 0

View Details

WitsCode @info_witscode

13 hours ago

Lesson from hardening a Supabase app this week: the tables had RLS on, but a view built on top of them returned every user's rows. Views run as their owner by default, so they skip RLS. On Postgres 15+, set security_invoker = true on the view and RLS applies again.

0 0 0 5 0

View Details

WitsCode @info_witscode

13 hours ago

@royawilliamsjr Same goes for edge functions. Create the client with the user's JWT for reads so RLS stays on, and keep the service key for narrow admin jobs only.

0 0 0 1 0

View Details

WitsCode @info_witscode

13 hours ago

@MenachemAni Agree. On the site side, check mobile drop-off at each checkout step first. A slow payment step on mobile is a common hidden leak that gets blamed on the ads.

1 0 0 3 0

View Details

WitsCode @info_witscode

13 hours ago

@ValoriLuca Good call checking CVR first. Splitting it by device and new vs returning visitors shows fast whether it's the site or a traffic mix shift.

0 0 0 1 0

View Details

WitsCode @info_witscode

13 hours ago

@PineapplesDev Classic one. Refresh on app resume, not only on a timer, since mobile OSes suspend timers in the background. And on a 401, refresh once and retry the request before logging the user out.

0 0 0 1 0

View Details

WitsCode @info_witscode

13 hours ago

@pradip_kaity Good list. Add a test after step 3: query as the anon role from a separate client and confirm you get zero rows. Policies that look right often aren't until you try to break them.

0 0 0 1 0

View Details

WitsCode @info_witscode

13 hours ago

@steventey @dubdotco @nextjs @vercel Nice gain. Worth checking that remote caching is hitting on preview builds too. On big monorepos a cold cache often costs more than the compiler does.

0 0 0 1 0

View Details

WitsCode @info_witscode

13 hours ago

Wispr Flow's team has shared that they launch 500 to 700 new ads a month with about 50 creators. The part worth copying: creators get a share of the ad spend behind their videos, not a flat fee per video. Our breakdown: witscode.com/blogs/wispr-fl…

0 0 0 6 0

View Details

WitsCode @info_witscode

17 hours ago

EU subscription stores: the €10,000 VAT threshold is one total for all your cross-border B2C sales in the EU, not one per country. Renewals cross it quietly. Once over, each renewal needs the customer's country rate, so update tax settings that day. witscode.com/blogs/shopify-…

0 0 0 8 0

View Details

WitsCode @info_witscode

21 hours ago

Timesheets fail because nobody logs hours until month-end. The n8n fix we built: 1. Log hours in chat: "ACME 2h hero fixes" 2. AI adds it to a Google Sheet 3. On the 1st, a Docs template becomes the PDF invoice 4. Founder OKs it in Slack, then it sends witscode.com/blogs/invoice-…

0 0 0 9 0

View Details

WitsCode @info_witscode

a day ago

A Supabase view runs with its owner's rights by default, so it can skip the RLS on the tables underneath. On Postgres 15+, run: alter view my_view set (security_invoker = true); Or move the view out of the public schema so the API can't reach it.

0 0 0 7 0

View Details

WitsCode @info_witscode

a day ago

So you're not ranking for the prompt. You're showing up for the short comparison searches it breaks into, like "X alternatives free". We wrote the whole process up, with 13 tactics and a 30-day plan: x.com/info_witscode/…

WitsCode @info_witscode

a week ago

x.com/i/article/2111…

0 0 0 141 1

0 0 0 2 0

View Details

WitsCode @info_witscode

a day ago

3. It pulls candidates from an index. ChatGPT uses its own crawl plus partners including Bing, so check Bing Webmaster Tools, not just Google. 4. It reads the pages and keeps the passages that answer plainly, with specifics, and that other sources back up.

1 0 0 1 0

View Details

WitsCode @info_witscode

a day ago

How does ChatGPT pick which sites to cite? None of the AI companies publish the logic, but their docs describe the same rough pattern. Here it is in 4 posts.

1 0 0 6 0

View Details

WitsCode @info_witscode

a day ago

Starting a SaaS build this week? Start from open source, not a blank prompt: 1. Next.js SaaS Starter (Stripe, teams, auth) github.com/nextjs/saas-st… 2. shadcn/ui components github.com/shadcn-ui/ui 3. Better Auth github.com/better-auth/be… 4. Upstash Ratelimit github.com/upstash/rateli…

0 0 0 6 0

View Details

WitsCode @info_witscode

2 days ago

@Xflas_H Quick way to catch them all at once: run select tablename from pg_tables where schemaname = 'public' and rowsecurity = false. Anything that comes back is open to the anon key. The Security Advisor in the dashboard flags these too.