Blog
Practical guides on JSON, YAML, and the other formats these tools work with.
How to Diff Two JSON API Responses (and Why Naive Diffing Fails)
Why a plain text diff produces false positives on JSON — formatting and key-order changes that mean nothing — and what a structural diff catches instead, including the one real tradeoff around comparing arrays.
Why You Should Never Trust a Decoded JWT Without Verifying It
A JWT's payload is just base64url-encoded JSON — anyone can forge one that decodes perfectly. Why the signature is the only part that proves anything, and why decoding a token is not the same as trusting it.
Encoding vs Encryption vs Hashing: Why Base64 Isn't Security
Encoding, encryption, and hashing all turn readable text into something scrambled-looking, but solve entirely different problems. Where Base64 actually fits, and why it was never meant to keep anything secret.
Why XML Still Matters in 2026 (SOAP, RSS, Config Files)
JSON won for new APIs, but XML is still load-bearing in SOAP services, RSS feeds, Office document formats, and config files across several major platforms — a grounded look at where it actually persists.
Flattening Nested JSON for Spreadsheets: A Practical Guide
How nested JSON objects and arrays actually turn into CSV columns — dot notation, index-based array flattening, inconsistent shapes across records — and when a spreadsheet is the wrong format entirely.
Query String Encoding Gotchas Every Developer Hits Eventually
The recurring query-string encoding mistakes — the +-vs-%20 trap, double-encoding, encoding a whole URL by mistake, unencoded reserved characters — with concrete examples of each.
Why Your YAML Indentation Keeps Breaking (and How to Avoid It)
The specific indentation mistakes that break YAML parsing — tabs, inconsistent widths, mixed list styles, misaligned nested mappings — and how to actually find where a file went wrong.
JWT Expiration Claims: exp, iat, and nbf Explained
What the exp, iat, and nbf JWT claims actually mean, why they are Unix timestamps in seconds (not milliseconds), and the unit-mismatch bug that causes most "why did my token expire early" confusion.
JSON Schema 101: Validating Structure, Not Just Syntax
The difference between checking whether JSON is parseable and checking whether it matches an expected shape, and where JSON Schema fits once syntax validation isn't enough.
Why Your Base64 String Won't Decode: Common Causes
The recurring, predictable reasons Base64 decoding fails — missing padding, copy-paste truncation, the standard-vs-URL-safe alphabet mismatch — and how to spot each one quickly.
JSON to XML: Handling Attributes vs Elements Correctly
XML has two ways to represent a key-value pair — attributes and child elements — and JSON has neither natively. How the @-prefix convention bridges the gap, with real before/after examples.
YAML Anchors and Aliases: Reduce Duplication in Your Config Files
How & anchors and *aliases let you define a YAML block once and reuse it, with real CI-config examples and what the expanded result actually looks like once converted to JSON.
URL Encoding Explained: Why Spaces Become %20
What percent-encoding actually does, which characters are always safe in a URL, the +-vs-%20 confusion, and the difference between encodeURIComponent and encodeURI.
What's Actually Inside a JWT? Header, Payload, and Signature Explained
A plain breakdown of the three parts of a JSON Web Token — header, payload, signature — what each one contains, and why decoding a JWT is not the same as verifying it.
What Is Base64 Encoding, Actually? A Plain-English Explanation
How Base64 encoding actually works under the hood, why it makes output ~33% larger, and why — despite showing up in JWTs and auth headers — it is not a form of security.
How to Validate JSON in JavaScript
A practical guide to validating JSON with JSON.parse, turning its error messages into line/column locations, and the common syntax mistakes that trip people up.
JSON vs YAML: When to Use Which
JSON and YAML represent the same data two different ways. A practical breakdown of when each format actually wins, with real examples from APIs, CI configs, and Kubernetes.
Common JSON Parsing Errors and How to Fix Them
Trailing commas, single quotes, unquoted keys, comments, duplicate keys — the recurring causes of invalid JSON, with concrete before/after examples for each.
JSON Minification: Why and When to Minify Your JSON
What minifying JSON actually strips, when the bandwidth savings are worth it (API responses, URLs, bundles), and when it just makes a file harder to read for no real benefit.