TIL: Jun 10

TIL: When automating repository operations via GitHub zipballs, you must implement strict path validation during extraction to prevent Zip Slip vulnerabilities and use fs.promises.rm with explicit directory scoping to ensure non-blocking, secure cleanup of temporary build artifacts. Always wrap multi-step chunk indexing in database transactions to maintain atomicity and enforce repository whitelisting to prevent unauthorized remote code execution.