Hugo

2026

  • I Rebuilt My Site Without PHP

    I rebuilt this site with Hugo, strict security checks, accessible templates and no PHP or database.

  • Support, share and post layouts

    I rebuilt the blog’s support cards, sharing controls and post layout around safer copying, progressive enhancement and measured dimensions.

  • A threat model for a static site

    A static Hugo site still has a publishing pipeline, credentials, third parties, and readers to protect. I put those risks into an OWASP Threat Dragon model and made CI keep the model tied to controls that actually exist.