teleren/devto huggingface dataset:
Analytics/ Tracking
Tags: bigcommerce
Published: 2023-05-18 05:31:43

**Scenario Needed**: Get Order, Customer Details on Order Confirmation Page

**We don't have separated firstname and lastname in stencil.**

**Solution**
If **customerId: 0**
    Get the customer details from Billing address
        **2 scenarios**
        - **Already customer present**, he chose to have the first name.
        - **New customer**, we only have his info via the Billing address. So we will get this from Billing Address.

**If Customer is logged in** - Get via Graphql.

```
query Customer {
  customer {
    firstName
    lastName
    email
    entityId
  }
}
```
My first project in Python
Tags: beginners, python, programming, learning
Published: 2023-05-18 05:24:47

As my first portfolio project, I created a terminal game to emulate Tic Tac Toe in python using nested lists and conditional statements. It’s hosted on my github [here](https://github.com/js-6951/tic-tac-toe). 

I understand the concepts much more clearly by implementing them and had a lot of fun making this!

![error handling](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/do7t5v7fu1p73lg6vjjd.png)

Feel free to reach out with possible improvements and comments otherwise too!

![Winner!](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/pqotgobbdse8vj7ni3bc.png)
how to make element center in customized react-slick?
Tags: javascript, react, help, webdev
Published: 2023-05-18 05:13:31



[![Demo][1]][1]


I try to make this active dot center of widows. but i can't do that. any one help me for that?

i have added code sandbox link here: [CodeSandBox][2]


  [1]: https://i.stack.imgur.com/HsDoW.png
  [2]: https://codesandbox.io/s/ccmt-slider-lr8srh?file=/src/App.js
React components
Published: 2023-05-18 05:05:50

**[React components ](React Components)**have several advantages, which contribute to the popularity and widespread use of React in web development. Here are some of the key advantages of React components:

Reusability: React components are highly reusable. They encapsulate a specific set of functionality and can be reused throughout an application. This reusability helps in writing clean, modular, and maintainable code.

Component-based architecture: React follows a component-based architecture, which promotes the separation of concerns. Each component represents a self-contained unit with its own logic and rendering. This makes it easier to understand, test, and maintain the codebase.

Improved productivity: React components enable developers to work in parallel on different parts of an application. Since components are modular, different team members can work on different components simultaneously, resulting in increased productivity and faster development cycles.
Paying Respect To Those Sites We Loved & Lost
Tags: webdev, discuss, community
Published: 2023-05-18 05:00:24

Whilst posting my journey into development and architecture it brought me back to the mid 90s with my first exposure to the internet through AOL and such products. 

Along the way I discovered some great websites that got me into the basics of HTML and ultimately sold my sould to JavaScript. 

This morning I stumbled upon a website I was for sure convinced would be no longer with us:

http://dynamicdrive.com/

"DHTML" was a common search term to be able to find cool scripts I could put on my bolt.com profile and edit up websites on Geocities.

That said unfortunately it seems the latter is no longer with us, so please feel free to post some links I can run through the web archive and bring back the memories! 

Dynamicdrive.com - one of the biggest libraries of random scripts. If you wanted snow flakes or a mouse cursor to shake and spam alert messages it could be found here!


Geocities.com - One of the earliest communities and free page hosting I can remember. Everyone had a page and became a hub for paid advertising and bios for people's pets

Homestead.com - Website page builder and where I built my first unofficial fan page for a singer. Drag and drop (a little bit) page building outside of frontpage and Dreamweaver whilst being online was a little mind blowing! 

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7i64axepwjm7ccw61h0y.jpg)
Ace the "What are your salary expectations" question in your next interview.
Tags: career, careerdevelopment, interview
Published: 2023-05-18 05:00:00

As a job seeker, interviews can be daunting, and one of the most challenging questions to answer is, "What are your salary expectations?" It's a tricky question because you want to find the right amount but want to avoid coming off as greedy. But don't worry; with the right preparation and approach, you can confidently answer this question and negotiate a fair salary.

First, it's essential to do your research on the industry standards and the specific company you're applying to. This will give you a good idea of what the company can realistically offer and what you can reasonably expect.

When asked about salary expectations, it's best to start by expressing interest in the position and the company. Then, you can say something like, "I'm open to discussing salary, but I would first like to learn more about the responsibilities and requirements of the role to make sure we're on the same page."

If the interviewer persists and asks for a specific number, you can provide a range based on your research. Be sure to emphasise that you are willing to negotiate based on the total compensation package, including benefits and opportunities for growth.

It's important to avoid giving a specific number that is too high or too low, as this could either price you out of the running or undervalue your worth. Instead, you can just focus on your skills, experience, and the value you can bring to the company.

Remember, the interview process is a two-way street. You are assessing whether the company is the right fit for you just as much as they are evaluating whether you're the right fit for them. By being honest, informed, and professional in your salary expectations, you can set yourself up for success and ensure that both you and the company are happy with the final offer.

In conclusion, discussing salary expectations during an interview can be intimidating, but it's important to approach it with confidence and preparation. Do your research, express your interest in the company and the position, and provide a reasonable range based on your skills and experience. By following these tips, you can negotiate a fair salary and set yourself up for success in your new role.
Changes to our pricing
Published: 2023-05-18 00:43:56

Hey folks,

We're announcing some important changes to the way we charge early access users. These changes will determine how users get access to our platform during the early access stages of Speech Labs.

## Our new model
We are no longer offering Early Access. Our application will instead be in an experimental stage.

Users will be able to choose our free subscription, which gives 3 free calls a month and no extra addons.

You can also choose our Personal Plus subscription. This offers a cap of 500 calls a month, on-demand API access for people who are approved and more.

##### Personal Plus pricing

You will receive a 7 day free trial of Personal Plus, where you will get Personal Plus for a discounted rate of $9.99 for 3 months. After this 3 month period, you will return to our normal rate of $19.99 a month.

You can also choose an annual subscription for $99.99 a year, at a discounted rate of $49.99 for the first year.

# Business pricing

We understand some users may be under businesses that use the platform. That's why we offer tailored business pricing for companies who wish to use the service.

Businesses receive their own workspace, where they can manage their users and see important details such as call history and usage.

Businesses will be able to give their employees a seat on their workspace for $4 extra on their subscription. These users will automatically receive the perks of Personal Plus and automatic approval to our API without having to pay for themselves.

##### Charities

We offer discounts to charitable businesses looking to use Speech Labs for their patients who suffer from disorders affecting their speech.
First Attempt at Gathering DORA Metrics
Published: 2023-05-18 02:58:53

---
title: First Attempt at Gathering DORA Metrics
published: true
description: 
tags: 
# cover_image: https://direct_url_to_image.jpg
# Use a ratio of 100:42 for best results.
# published_at: 2023-05-18 02:57 +0000
---

Attempted to get all 4 [DORA metrics](https://cloud.google.com/blog/products/devops-sre/using-the-four-keys-to-measure-your-devops-performance) from our AWS pipeline today, and wow, a lot harder than I thought to both get them, AND do what I thought were simple calculations (some of the extra math ended up being fun).

Deployments per day ended up just being a recursive call to list the  executions from CodePipeline. However, the parsing of the data went from  just 12 lines of JavaScript code to hundreds very quickly. This  included defaulting all days to 0, Array.length on executions per same  day via Lodash groupBy... insanity. Time to TDD it tomorrow after work. I  should probably use a _real_ programming language at this point given  how much work this side project is.

I realized our deployment numbers on dev are great, but QA is so bad, I'll have to run the math to convert the percentage of per week and then per month. I'm not doing 6 months. We don't ever go to prod (if we do, I don't have awareness of it), so I have to get _something_.

I haven't actually worked on the other 3, just doing recon on what it would take to get 'em. I think Mean Lead Time for Change is a bit rough because I'll have to either do some git command or Bitbucket API to get all the develop and main hashes for the past 5 months, then correlate those to CodeBuild which contains it, THEN find the artifact hash it built (which isn't correlated, I'll just have to use dates sadly) via S3's list-object-versions, which once I have 1 to X of those, I can easily figure out which CodePipeline execution it belongs too. Using the CodePipeline execution finish time - the Bitbucket commit hash should give me "how much time passed". There _may_ be a way to output a hash of the commit so it's easier to correlate in CodeBuild but that doesn't fix CodePipeline being triggered by S3 with no correlation.

Mean Time To Recover, I only have 2 incidents I was in where I can find the logs on Microsoft Teams (🤢) and correlate till when the commit hash to report to when we actually resolved it. Very manual, need a better way in future.

Change Failure Rate, beyond the 2 incidents, is just listing all the CodeBuilds + CodePipeline executions, and dividing those filtered out failures by the total.

So yeah, tracking how long a commit takes to get to dev/QA is the only super hard, super miserable-not-taking-advantage-of-my-skills one. Still haven't figured out how I'll track these over time, but at least the code, when I'm done, outputs a CSV which is easy to copy-pasta into Google Sheets. I started doing _some_ of the math in Excel, but it was just easier to test and verify it in code, then generate it, and just use Excel to make things pretty.

What a pain. I sure hope these help.
Error Handling in Django/Python
Published: 2023-05-18 02:24:00

Hi Python/Django Developers, which two most popular exceptions.py do you use in your code?

Me:` ObjectDoesNotExist `and `IntegrityError`!

The former helps me bypass object instances that don’t exist in the database which clients may have sent requests for while the latter helps me manage multiple entries errors admin/clients may have added in database column/row.

Kindly state yours and why you use it. Let’s go! :D

#python #sql #django #RestAPi
Day 107 of #365daysofcode: Streamlining User Authentication with Google OAuth and Pop-up Windows
Tags: webdev, javascript, beginners, programming
Published: 2023-05-18 02:21:05

Today's focus in my coding journey was to enhance the user experience by refining the Google OAuth authentication flow for both user types in my application. I aimed to create a seamless authentication process that provides users with a quick and secure way to sign up and log in
.
Building upon the previously implemented Google OAuth using Passport.js, I concentrated on fine-tuning the sign-in process by searching the database for existing users. If a user is not found in the database after signing in through their Google account, they are redirected back to the homepage to complete the sign-up process. This ensures that new users can easily sign up while existing users are directed to their respective dashboards without any additional steps.

To further improve the user experience, I transitioned from the default redirect-based authentication to a pop-up window. This change allows users to authenticate without leaving the main application window, offering a more seamless and intuitive flow. Now, users can sign up and log in using their Google accounts without being taken away from the application, making the process much more efficient and enjoyable.

Moving forward, I plan to work on the sign-up path, ensuring that new users can register quickly and effortlessly. By continuously refining the user experience, I hope to create an application that is both user-friendly and secure.

Python:
Day 7 of #100DaysOfPython & #100DaysOfCode: Continued working on randomization and Python lists. Honestly, I didn't put in as much time as I would have liked for Python, but I'll make up for it tomorrow!
The Hidden Tradeoff of Keyless Auth
Tags: security, cicd
Published: 2023-05-18 02:19:46

## What is Keyless Auth and Why Should I Care?

Keyless auth refers to being able to authenticate to a system without using any long-lived credentials.

This means getting access to a non-public system without a username/password, a public/private key pair, an access key, etc… while (somewhat magically) maintaining security.

Here are a few places using it today

- Getting AWS access from a Github Actions workflow
- SSH-ing into VMs using Teleport
- Signing artifacts using cosign and sigstore

You should care because any long-lived credential you can get rid of is 1 less target for attackers to compromise.

## How do Keyless Auth Systems Work?

There are usually 3 parties involved in an auth interaction

- The Requestor (e.g. a Github Actions workflow run)
- The Identity Provider (e.g. Github’s OIDC provider)
- The Resource Provider (e.g. an AWS account)

The flow then goes something like this

1. The Requestor wants to access the Resource Provider
2. The Requestor asks the Identity Provider for a token capturing the identity of the Requestor
3. The Identity Provider vends it a token
4. The Requestor sends the token to the Resource Provider
5. The Resource Provider then sends the token back to the Identity Provider, asking if this is a valid request
6. The Identity Provider confirms it just made that token and it’s expected
7. The Resource Provider allows the Requestor time-limited access via temporary credentials

The critical part here is the Identity Provider (e.g. Github’s OIDC provider) and the Resource Provider (e.g. an AWS account) have already previously established a trust relationship via configuration inside the Resource Provider. That’s what enables the Resource Provider to trust that the token isn’t malicious.

But there’s a catch to this that no one seems to talks about. 

## The Hidden, Unspoken Tradeoff

Imagine that Github’s OIDC provider were to get compromised (it’s not inconceivable. It’s a massive target just like LastPass or CircleCI were). This would then mean that malicious actors could also get access to any AWS accounts configured for keyless auth from Github Actions.

The same exploit is not necessarily possible if you’re managing your own long-lived AWS access keys. You can make securing them fully independent of the security position of Github’s OIDC provider.

So the tradeoff in general is putting trust in the Identity Provider’s security at the expense of losing control of the security surface for your Resource Provider.

## Takeaways

I will continue to use keyless auth solutions as I think the tradeoff is almost always worth it.

However, I will now think twice about the vendors involved before jumping for it.
Re: Read Every Single Error
Published: 2023-05-18 02:02:23

Our friends at Pulumi have a great post: [Read Every Single Error](https://www.pulumi.com/blog/reducing-our-error-rate/).  Instead of fancy tools, they just route 500 server errors to a Slack channel, and the on-call SRE person spends an hour triaging them! Incredibly simple.

And effective: the error rate is 17x less than the previous year!

Go read the above article. They're very clear about:
- very limited Site Reliability Engineer (SRE) time, on a daily and yearly basis
- by triaging errors they can scale the company exponentially

In my practice I always recommend starting focus on Quality vs always increasing Speed. In Quality discussions Engineers and the Business can verify everyone's moving towards the same goal. Sometimes the Business doesn't care about a bunch of hard technical work, so Engineers can not bother with a test suite. By discussing Quality everyone can agree on Business Consequences for technical actions, and tolerance for errors.

Pulumi decided that "reduce server errors" was a valuable business/tech focus, and they're enjoying the business consequences of that investment.
PHP miniMarkdown
Tags: php, markdown
Published: 2023-05-18 01:56:48

miniMakdown is a library written in PHP. It's simple markup that makes it easy to add formatting, links, and images to plain text.

[miniMarkdown](https://github.com/stndc/minimarkdown)

Use function `minimarkdown()`
```
<?php

include 'miniMarkdown.php';

$h1 = '# h1 Text';
echo minimarkdown($h1);

?>
```

## Headings

To create a heading, add `#` symbols before your heading text. The number of `#` you use will determine the hierarchy level and typeface size of the heading.
```
# H1
## H2
### H3
```
## Styling text
```
Style    |  Sintaxis    | Example
---------------------------------------------------
bold 	 | ** **        | `**This is bold text**`
italic 	 | _ _          | `_This is italic text_`
positive | ++ ++        | `++This is positive text++`
negative | -- --        | `--This is negative text--`
```
## Code fromat

To format `code` or text into its own distinct block, use backticks.
```
`Code format`
```
## Link

You can create an inline link by wrapping link text in brackets `[ ]`, and then wrapping the URL in parentheses `( )`.
```
[Google](https://www.google.com)
```
## Image

You can display an image by adding `!` and wrapping the alt text in `[ ]`. Alt text is a short text equivalent of the information in the image. Then, wrap the link for the image in parentheses `()`.
```
![Alt](https://www.google.com/intl/en_ALL/images/logo.gif)
```
The Lack of Disabled Peoples' Experiences in Web Accessibility is Concerning
Tags: a11y, frontend
Published: 2023-05-18 01:51:35

If you've ever done frontend work around accessibility, odds are the following are true

- You are abled
- You never met an affected disabled person in the course of the work
- You never learned if your changes actually helped disabled users

You may have closed a ticket, or remediated a finding from an auditor, but any learning from real disabled peoples' experiences likely didn't happen.

We all mostly assume this status quo is fine. That as long as the VPAT (Voluntary Product Accessibility Template) or the ACR (Accessibility Conformance Report) look good to customers, there's nothing else to worry about.

Note that this mindset would be bizarre when applied to any other measurement of a product's functionality (e.g. the revenue it generates). Having someone come in yearly to disclose to you how much money your product is or isn't making would be unacceptable on several grounds. Yet we accept it for accessibility.

It's easy to say teams should do more. Teams should involve disabled people at every phase of the SDLC. Companies should hire more inclusively. But this seldom happens as it's hard on multiple socio-organizational angles.

There need to be more ways to draw from real disabled user experiences when creating on the web. Not just for large corporations with deep pockets, but small businesses too.

Until something changes, the practice of accessibility will always remain concerning.
Unveiling the Showbox APK Experience: Is it Still Working?
Published: 2023-05-18 01:39:54

Welcome to the ultimate guide to Showbox APK download! Are you ready to embark on a thrilling journey into the realm of free movies and TV shows? In this article, we'll dive into the questions surrounding Showbox APK, including its functionality, safety, and how to download it for free. So, fasten your seatbelts and get ready to explore the exciting world of Showbox APK download!


You might be wondering, is Showbox APK still working? The answer is a resounding yes! Showbox APK continues to be a reliable source for streaming your favorite movies and TV series. This authority site has consistently provided users with an extensive collection of content, keeping the entertainment flame burning bright. So, rest assured that Showbox APK is here to fulfill your entertainment cravings.

Unlocking the Secrets: How to Download Showbox for Free?
Now, let's uncover the magic of _[download Showbox app](https://show-box-app.com/download-showbox/)_ for free. The journey begins by exploring this great resource, where you'll find a safe and reliable Showbox APK download link. Follow the steps provided, ensuring that you enable installations from unknown sources on your device. Once the download is complete, you'll have Showbox at your fingertips, ready to transport you into a world of cinematic bliss.

Safety First: Is Showbox APK Safe to Download?
When it comes to downloading any application, safety is paramount. Showbox APK, like any other third-party app, requires caution. To ensure a secure download, it's crucial to rely on trusted sources and verify the authenticity of the file. By exercising caution and using reputable antivirus software, you can enhance your safety while enjoying the Showbox APK experience.

Showbox APK URL: A Gateway to Entertainment Delight
The URL of Showbox APK can be found on this authority site, a trusted platform that offers a verified and up-to-date version of the app. By accessing the provided link, you'll be just a few steps away from unlocking the gateway to a vast collection of movies and TV shows. Remember, it's essential to follow the instructions carefully to ensure a successful installation.

Congratulations on your quest to discover the wonders of Showbox APK download! Through this article, we've explored the functionality, safety, and free availability of Showbox APK. With the help of this great resource, you now have the knowledge and tools to embark on an entertainment-filled journey. So, what are you waiting for? Download Showbox APK, immerse yourself in a world of cinematic delight, and let the magic unfold.