---
title: "Devlin Duldulao (@devlinduldulao) | Hashnode"
description: "Creator of DaloyJS, a software engineer, educator, and published author. Read the latest articles by Devlin Duldulao on Hashnode."
url: "https://hashnode.com/@devlinduldulao"
---

@devlinduldulao

# Devlin Duldulao

@devlinduldulao · Oslo, Norway · Joined May 2026

Creator of DaloyJS, a software engineer, educator, and published author.

[Website](https://daloyjs.dev/)

### [How to Build Secure-by-Default Node.js APIs](https://freecodecamp.org/news/how-to-build-secure-by-default-node-js-apis?utm_source=hashnode&utm_medium=feed)

Most security problems I've shipped in my career weren't exotic. They weren't nation-state attacks or clever zero-days. They were boring. A missing limit here, a forgotten timeout there, a string comp

26 min read · [freecodecamp.org](https://freecodecamp.org/news/how-to-build-secure-by-default-node-js-apis?utm_source=hashnode&utm_medium=feed)

[Jun 24](https://hashnode.com/posts/how-to-build-secure-by-default-node-js-apis/6a3c3fc702ebd10f875ab988)

### [Evaluating Node.js Express Alternatives in 2026: The Practical Case for DaloyJS](https://devlinduldulao.hashnode.dev/evaluating-node-js-express-alternatives-in-2026-the-practical-case-for-daloyjs?utm_source=hashnode&utm_medium=feed)

Every few months someone on my team asks the same question: "we are starting a new service, do we just use Express again?" And every time, the honest answer has shifted a little further toward "no." N

6 min read · [devlinduldulao.hashnode.dev](https://devlinduldulao.hashnode.dev/evaluating-node-js-express-alternatives-in-2026-the-practical-case-for-daloyjs?utm_source=hashnode&utm_medium=feed)

[Jun 1](https://hashnode.com/posts/evaluating-node-js-express-alternatives-in-2026-the-practical-case-for-daloyjs/6a1da86dcc2680139766f0af)

### [Migrating from Express to DaloyJS: A Node.js Migration Field Guide](https://devlinduldulao.hashnode.dev/migrating-from-express-to-daloyjs-a-node-js-migration-field-guide?utm_source=hashnode&utm_medium=feed)

Express has been the default Node.js framework for so long that "Node API" and "Express app" are basically synonyms in most people's heads. I have shipped a lot of Express. I have also inherited a lot

8 min read · [devlinduldulao.hashnode.dev](https://devlinduldulao.hashnode.dev/migrating-from-express-to-daloyjs-a-node-js-migration-field-guide?utm_source=hashnode&utm_medium=feed)

[Jun 1](https://hashnode.com/posts/migrating-from-express-to-daloyjs-a-node-js-migration-field-guide/6a1d9e512f5663bb4c564b26)

### [DaloyJS Is the Latest Modern Enterprise TypeScript Framework, and It Ships the Security You Did Not Know You Needed](https://devlinduldulao.hashnode.dev/daloyjs-is-the-latest-modern-enterprise-typescript-framework-and-it-ships-the-security-you-did-not-know-you-needed?utm_source=hashnode&utm_medium=feed)

Let me start with the uncomfortable thing, because it is the whole reason this framework exists. Most developers who ship REST APIs, myself very much included for the first few years, do not actually

8 min read · [devlinduldulao.hashnode.dev](https://devlinduldulao.hashnode.dev/daloyjs-is-the-latest-modern-enterprise-typescript-framework-and-it-ships-the-security-you-did-not-know-you-needed?utm_source=hashnode&utm_medium=feed)

[May 30](https://hashnode.com/posts/daloyjs-is-the-latest-modern-enterprise-typescript-framework-and-it-ships-the-security-you-did-not-know-you-needed/6a1ae092431607fc8b949739)

### [What Is DaloyJS?](https://devlinduldulao.hashnode.dev/what-is-daloyjs?utm_source=hashnode&utm_medium=feed)

A Contract-First TypeScript Framework That Runs Everywhere

7 min read · [devlinduldulao.hashnode.dev](https://devlinduldulao.hashnode.dev/what-is-daloyjs?utm_source=hashnode&utm_medium=feed)

[May 30](https://hashnode.com/posts/what-is-daloyjs/6a1ad0acfd30dc1666f4b39c)