Faster builds: migrating to the TypeScript 7 native compiler and Rolldown
Migration strategies for TypeScript 7 and Rolldown in a monorepo: default breaking changes, --checkers and --builders, Vite 8, tsdown, and reliable CI/CD benchmarks.
Diego Betto · Technical consulting for companies
Solid web architecture for companies that can't afford downtime or technical debt
I'm Diego Betto, Co-Founder & CTO of PAPION. My team and I help companies, agencies, and product teams design, build, and secure scalable React, Node.js, and TypeScript applications.
Services
End-to-end technical consulting, from frontend to security, for companies that need to scale without surprises.
Frontend Architecture
Design and scalability for React, Next.js, and Astro applications: maintainable components, solid performance, less technical debt over time.
Backend & APIs
Development and optimization of Node.js, Fastify, and TypeScript APIs: reliable services built to handle business growth.
Code Review & Mentoring
Hands-on support for dev teams to raise TS/JS code quality, cut production bugs, and speed up onboarding.
Security & Performance
Application hardening, dependency/CVE monitoring, Core Web Vitals optimization.
About me
My name is Diego Betto. I am Co-Founder & CTO, senior full-stack engineer at PAPION, with 20+ years of experience. I'm based in Udine, Italy, working mostly remotely for clients across the country. I work across frontend and backend architecture, application security, and mentoring other developers, with particular depth in React, JavaScript/TypeScript, and Node.js.
Learn more →Where we work
Detailed case studies coming soon — in the meantime, here are the contexts we work in most often with PAPION.
E-commerce & Retail
High-traffic React frontends and order-management system integrations.
B2B SaaS Products
Node.js/Fastify backends for growing products, with a focus on security and observability.
In-house Tech Teams
Code review, mentoring, and security hardening without slowing delivery down.
From the blog
Technical notes on React, Node.js, security, and performance.
Securing Server Actions and React Server Components: data leaks, validation, and taint APIs
How to secure Server Actions and React Server Components: implicit endpoints, input validation, authorization, environment variables, taint APIs, and recent CVEs.
Building a Custom MCP Server in TypeScript: Step-by-Step Guide (Docker and Linting)
How to build a Model Context Protocol server in Node.js and TypeScript: tools, resources, prompts, stdio, Docker API and oxlint, testing with the Inspector, and security.
Software Supply Chain Security in Node.js and TypeScript: Dependency Hardening and CI/CD Pipelines
How to protect a Node.js project from supply chain attacks: install scripts, typosquatting, lockfiles, automated audits, GitHub Actions, provenance, CSP and SRI.
WebGPU and Client-Side AI: In-Browser Inference with JavaScript and TypeScript
How to run machine learning models directly in the browser with WebGPU and Transformers.js: model loading, Web Workers, WASM fallback and memory limits.
TypeScript 7.0 and 7.1 deep dive: parallelism, new defaults, and migration
A technical deep dive into TypeScript 7.0 and 7.1: how --checkers and --builders work, why the defaults changed, what was removed, migration examples, and FAQ.
Vitest: what it is, how to install it, and how to use it with React 19
A practical guide to Vitest: installation, configuration, testing React 19 components (including useActionState), mocking with vi, coverage, and a comparison with Jest and node:test.
Let's talk about your project
Tell me about your technical challenge: architecture, performance, security, or a team that needs reinforcing. I answer every email personally.