Skip to content
View vctqs1's full-sized avatar

Block or report vctqs1

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
vctqs1/README.md

Hi 👋, I'm Thu

Technical Lead & Frontend Engineer · Developer Experience Enthusiast · Vietnam 🇻🇳

vctqs1


  • 🔭 Currently Technical Lead at HCLTech × ANZx — building the Plus web banking platform & design system (promoted from Senior FE within a year; 8+ years total across frontend, backend & DevOps)
  • 🌱 Deeply passionate about Developer Experience (DX) — tooling, CI/CD, build performance, and developer workflows
  • 🏗️ I build things like Webpack/Vite plugins, runtime environment solutions, and accessibility-first design systems
  • 📦 Author of nav-progress-bar — a zero-dependency, CSP-safe Web Component for Next.js App Router navigation
  • 🔐 Published a practical mitigation for the Nx CREEP vulnerability (CVE-2025-36852) using GCP IAM conditions & Workload Identity Federation
  • 👯 Looking to collaborate on JS/TS, React, Vite, and DX-focused open source projects
  • 💬 Ask me about React, Next.js, Vite plugins, micro-frontends, mono-repos, gRPC, or DevOps
  • 📫 Reach me at vctqs1@gmail.com

📦 My Projects

Project Description
@vctqs1/nav-progress-bar Zero-dependency, CSP-safe navigation progress bar as a native Web Component.
@vctqs1/nav-progress-bar-react React wrapper @vctqs1/nav-progress-bar. First-class Next.js App Router support.
@vctqs1/vite-plugin-resource-collector Vite plugin to collect only necessary files for build-time usage

🛠️ Open Source Contributions

Write-ups


🤝 Connect with me

vctqs1 vctth 13221653 @vctth vctqs1


⚙️ Languages and Tools

react nextjs typescript vite redux tailwind go nodejs graphql kubernetes gcp docker cypress jest figma git postgresql bash linux


vctqs1 streak stats

Pinned Loading

  1. Practical Mitigation for Nx CREEP Vu... Practical Mitigation for Nx CREEP Vulnerability Using GCP IAM Conditions and Branch-Restricted Cache Writes
    1
    # Practical Mitigation for Nx CREEP (CVE-2025-36852) Using GCP IAM Conditions
    2
    
                  
    3
    ## TL;DR
    4
    
                  
    5
    If you're using deprecated Nx self-hosted remote cache packages like `@nx/gcs-cache`, one immediate mitigation for the CREEP vulnerability is:
  2. nav-progress-bar nav-progress-bar Public

    A zero-dependency, CSP-safe navigation progress bar built as a native Web Component. First-class support for Next.js App Router — fills the dead time between a link click and loading.js appearing, …

    JavaScript

  3. vctqs1-vn/vite-plugin-resource-collector vctqs1-vn/vite-plugin-resource-collector Public

    a Vite plugin designed to help developers collect and log transpiled source files during the build process

    TypeScript