Zakaria Labib
Full Stack Developer
9+ years exp
9+ years ML exp
4+ projects
JavaScript
Python
TypeScript
PHP
Rust
SQL
Data Layer & Database: 4/10
Online
Invite to interview
Message
Download CVCV
Overview
Technical skills
Timeline
Roles
Overview
Document tooling and design engineer (Senior-level, strongest at building robust PDF and programmatic design pipelines). The strongest proven skill is document processing and content-sanitization combined with an art-directed design engine - evidenced by opencode/skills/pdf/scripts/pdf.py (extract, form, sanitize pipelines) and opencode/skills/pdf/scripts/design_engine.py (color palette, WCAG audits, SVG generators). There is little or no evidence of ML model training, experiment tracking, inference serving or GPU/quantization engineering in the public human-authored code.
Technical skills
JavaScript
Python• Middle
TypeScript• Middle • 9y+
PHP• Staff • 9y+
Rust• Middle • 9y+
SQL• Senior • 7y+ • 4 projects
PHP
Doctrine
Eloquent
Pest
PHPUnit
WordPress
Laravel• 9y+
Livewire• 7y+
Rust
Tauri
SQLx
Tokio
Serde
Databases
PostgreSQL
MySQL• 9y+
SQLite• 9y+
Redis• 7y+ • 2 projects
AI/ML
Pillow
AI Agents• 9y+
RAG• 6y+
LLM• 1 project
Frontend
React.js
Vite
PostCSS
GraphQL
Tailwind CSS• 9y+
Alpine.js• 7y+
Vue.js• 5y+
DevOps
Docker• 9y+
Git• 9y+
Rest API• 9y+
GitHub Actions• 8y+
CI/CD• 5y+
Cybersecurity
AppSec
DFIR
Cryptography
Cryptography
Mobile
MVC
Repository Pattern
QA
Playwright• 6y+
Vitest• 5y+
Timeline
Founder & Lead Engineer
•
Executive
HOTECH & SOFT
•
Cofounder
Built and shipped multiple products for SMEs, handling discovery-to-deployment across web and desktop use cases. Architected and maintained a production open-source ERP with inventory, POS, multi-currency accounting, customer/supplier management, and API integrations. Shipped a local-first desktop ERP using a modern web UI and Rust-based components, including CRM, multi-account email with encryption, and RAG-based assistance. Set up CI workflows and contributed to an active open-source ecosystem.
PHPsince 2017
Laravelsince 2017
Livewire
Tailwind CSS
Alpine.js
Rest API
MySQL
SQLite
Rust
Docker
Git
GitHub Actions
TypeScript
Vitest
Playwright
AI Agents
RAG
smeMaster
Desktop app
Desktop ERP for SMEs built with Tauri v2, React 19, Rust, and SQLite/WAL. Reached 461 clones in 4 days after Reddit launch. Currently v1.0.0-rc.
Features: CRM, email campaigns, multi-account email (Gmail/IMAP/SMTP), calendar, tasks, automation, PGP encryption, RAG AI assistant.
Tauri
React Native
TypeScript
Rust
SQLite
Vitest
Playwright
myStockMaster
Website
Production-grade inventory & ERP system. 438 GitHub stars · 163 forks · 9 contributors · 1,068 commits.
Features: multi-warehouse inventory, POS, multi-currency accounting, roles & permissions, import/export, Telegram bot promotions, low-stock alerts, multi-language support.
PHP
Laravel
Tailwind CSS
Livewire
Alpine.js
MySQL
Docker
Pest
PHPStan
Laravel Developer
•
Middle
Hilbert Investment Solutions
•
Full-Time
Designed and implemented Laravel backend systems for a UK fintech serving institutional clients with complex financial workflows. Established code-review standards and enforced quality gates around type safety and CI/CD. Collaborated with product teams in an async-remote setup to deliver features across time zones.
PHP
Laravel
CI/CD
Technical Manager
•
Lead
Alphaboost
•
Full-Time
Led a small engineering team delivering bespoke Laravel applications for agency clients. Introduced CI/CD pipelines, code-review workflows, and stronger design-system discipline. Delivered a travel-management system with a Laravel backend and Vue-based UI, and advised clients on translating business requirements into technical architecture.
PHP
Laravel
Vue.js
CI/CDsince 2021
Senior Backend Developer
Confidence: Medium API Engineer
Backend engineer (Middle) specializing in Laravel-based inventory, POS and finance analytics for SME ERP systems. The strongest proven skill is domain-specific financial and customer analytics implemented in app/Actions/Finance/GenerateFinancialReportsAction.php and related Actions. The analyzed human-authored files do not evidence production-grade distributed resilience patterns, a migration history chain, nor explicit security/auth boundary implementations.
API Design
1/10
How well APIs are designed
Minimal explicit API design artifacts in the human-authored files analyzed. The code shows backend Actions used by higher-level controllers or Livewire components but no versioning strategy, idempotency keys, or documented error contract in these files.
Data Layer & Database
4/10
Working with databases
Clear, repeated data-layer work with non-trivial queries and grouping logic. The code contains date-based grouping, cohort computations and selectRaw usage showing awareness of SQL aggregation and reducing N+1 patterns, though full evidence of migration history or explicit transaction/isolation handling was not present in the analyzed files.
Evidence
Zakarialabib/myStockMaster: app/Actions/Finance/GenerateFinancialReportsAction.php::calculateTotalRevenue - uses grouped queries and aggregations
Zakarialabib/myStockMaster: app/Actions/Finance/CalculateExpansionReadinessAction.php::getMonthlyRevenue - uses selectRaw with date formatting and groupBy
Zakarialabib/myStockMaster: app/Actions/Finance/CalculateCustomerMetricsAction.php::calculateCohortAnalysis - cohort grouping using db_date_format and retention calculations
Scalability & Performance
3/10
Handling load and speed
Some attention to performance via DB-side aggregation and backgroundable tasks implied by application structure, but large in-memory collections (get() + map) and placeholder implementation choices limit demonstrated production-scale optimizations and cache/invalidations strategies in these files.
Evidence
Zakarialabib/myStockMaster: app/Actions/Finance/GenerateFinancialReportsAction.php::generateRevenueAnalysis - groups sales for time-based breakdowns
Zakarialabib/myStockMaster: app/Actions/Finance/CalculateExpansionReadinessAction.php::calculateTableUtilization - performs aggregated calculations from sales collections
Zakarialabib/myStockMaster: app/Actions/Finance/CalculateCustomerMetricsAction.php::calculateCLVMetrics - derives metrics by traversing Eloquent relationships
System Architecture
3/10
Overall system structure
Reasonable modular architecture at the code level - Actions layer for domain logic, separated concerns for reports and analytics - but the analyzed human-authored files are single-service PHP actions and do not show multi-service contracts, fault-isolation design, or advanced resilience trade-offs.
Evidence
Zakarialabib/myStockMaster: app/Actions/Finance/GenerateFinancialReportsAction.php - encapsulated report-generation action
Zakarialabib/myStockMaster: app/Actions/Finance/CalculateExpansionReadinessAction.php - dedicated expansion-readiness analysis action
Zakarialabib/myStockMaster: app/Actions/Finance/CalculateCustomerMetricsAction.php - dedicated customer-metrics action
Security & Auth
Protecting data and access
Not evidenced in public code
Reliability & Observability
Stability and monitoring
Not evidenced in public code
Expertise
Databases & Vector Storage• Middle
PHP• All Tiers
Messaging & Real-time• All Tiers
Rust• All Tiers
Industries
Commerce• Middle
Financial Services• Middle
Technologies
PHP• Staff • 9y+
Rust• Middle • 9y+
Rest API• 9y+
GraphQL
Laravel• 9y+
WordPress
Tokio
Serde
Tauri
PHPUnit
Pest
Livewire• 7y+
Eloquent
Doctrine
SQLx
Cargo• mentioned only
Recommendations
- Lead backend feature work for SME ERP modules such as inventory, POS, invoicing and financial reports using Laravel Actions.
- Implement domain analytics and reporting pipelines that convert transactional data into KPI dashboards and cohort analyses.
- Integrate and harden the local sidecar and vector-store components (Rust/Tauri) for on-device RAG and ML features.
- Harden reliability, observability and security by adding explicit retry/backoff, structured logging with correlation ids, and documented API error contracts.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Middle AI/ML Engineer
Confidence: Medium Generalist
Document tooling and design engineer (Senior-level, strongest at building robust PDF and programmatic design pipelines). The strongest proven skill is document processing and content-sanitization combined with an art-directed design engine - evidenced by opencode/skills/pdf/scripts/pdf.py (extract, form, sanitize pipelines) and opencode/skills/pdf/scripts/design_engine.py (color palette, WCAG audits, SVG generators). There is little or no evidence of ML model training, experiment tracking, inference serving or GPU/quantization engineering in the public human-authored code.
Model Architecture & Training
How well models are designed and trained
Not evidenced in public code
Data Pipeline & Feature Engineering
6/10
How data is prepared for models
Robust document data pipelines and feature engineering for PDF and form processing are present, with careful handling of page ranges, table extraction, image extraction, form field normalization and validation, and a content sanitization pipeline for Unicode and glyph issues.
Evidence
opencode/skills/pdf/scripts/pdf.py: extract_text and extract_table functions (pdfplumber based extraction and page-range handling)
opencode/skills/pdf/scripts/pdf.py: pages.clean and pages_split/pages_merge use pikepdf for efficient page manipulation and safe removal of blank pages
opencode/skills/pdf/scripts/pdf.py: content_sanitize and _sanitize_one_char for Unicode cleanup and zero-width/BIDI control removal
Experimentation & Evaluation
2/10
How results are measured and tested
Some validation and auditing utilities exist (palette audits, content-sanitize dry-run) but there is no structured experiment tracking, A/B evaluation or ML validation harness.
Evidence
opencode/skills/pdf/scripts/pdf.py: content_sanitize_cli produces a dry-run report of changes
opencode/skills/pdf/scripts/design_engine.py: audit_cascade_palette enforces constraints and reports violations for generated palettes
MLOps & Deployment
How models are shipped to production
Not evidenced in public code
Computational Efficiency
2/10
How efficiently computing resources are used
Light attention to reproducibility and efficiency (use of streaming pikepdf operations, seed control for deterministic outputs) but no GPU/quantization/batching or explicit runtime profiling work.
Evidence
opencode/skills/pdf/scripts/pdf.py: pages_merge and pages_split use pikepdf to append and save pages rather than naive full-file reserialization
opencode/skills/pdf/scripts/design_engine.py: many functions accept seed parameters and set random.seed for reproducible palette and SVG outputs
Research Depth & Innovation
4/10
Depth of research and new ideas
Design-engine shows thoughtful algorithmic work and domain-aware heuristics (WCAG contrast checks, hue sanitization, role-based cascade palette, programmatic SVG generators) indicating substantive engineering and product-aware innovation in visual design tooling.
Evidence
opencode/skills/pdf/scripts/design_engine.py: generate_color_palette enforces HSL bounds, WCAG contrast adjustments, and accent-hue sanitization
opencode/skills/pdf/scripts/design_engine.py: generate_cascade_palette with tiered saturation caps and audit_cascade_palette enforcement
opencode/skills/pdf/scripts/design_engine.py: multiple SVG generators (generate_flow_svg, generate_grid_svg, generate_ordered_texture_svg, generate_continuous_flow_svg) for algorithmic backgrounds
Expertise
RAG• All Tiers
AI Agents & Agentic Workflows• All Tiers
LLM• All Tiers
Industries
Design & Creative• Middle
Software• Middle
Technologies
Python• Middle
MySQL• 9y+
PostgreSQL
AI Agents• 9y+
SQLite• 9y+
RAG• 6y+
Pillow
Recommendations
- Develop production-grade document processing and PDF generation services including sanitization, form automation and image extraction pipelines.
- Build aesthetic asset generators and design tooling (palette engines, algorithmic SVG backgrounds, report templates) for automated report and marketing asset production.
- Implement rigorous testing and evaluation dashboards - unit/integration tests and objective quality checks for the palette/SVG outputs and PDF fidelity.
- Extend into end-to-end document intelligence features - OCR integration, structured extraction to downstream data pipelines, and monitoring for corrupt encodings and font glyph issues.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Middle Security Engineer
Confidence: High Generalist
Application-focused PHP/Full-stack engineer (middle level) building inventory, POS and finance features with pragmatic security and validation patterns. The strongest proven skill is designing modular application services and installation/operational flows as seen in app/Livewire/Installation/StepManager.php and the app/Actions/Finance/* analytics and reporting actions. Public code lacks structured vulnerability research, formal threat models, and hardened secret-management or CI/CD SCA evidence.
Vulnerability Analysis
2/10
Finding security weaknesses
Limited evidence of vulnerability root-cause analysis or PoC work; some pragmatic fixes and runtime-safety checks exist but no structured CVE-style analysis or reproducible exploit proofs.
Evidence
app/Http/Requests/Auth/LoginRequest.php: rate-limiting and authenticate/ensureIsNotRateLimited methods
app/Livewire/Installation/StepManager.php: validateDatabase/testConnection logic with exception handling
app/Actions/Products/GenerateBarcodesAction.php: defensive defaulting to avoid vendor crashes (nullable symbology handling)
Cryptography & Secure Protocols
2/10
Using encryption correctly
Basic correct use of framework crypto primitives (password hashing and email verification flows) but no advanced crypto protocol work or key lifecycle management.
Evidence
app/Livewire/Installation/StepManager.php: Hash::make used when creating admin user
app/Http/Controllers/Api/AuthController.php: uses Hash for password handling
Offensive Security / Pentesting
Testing by attacking
Not evidenced in public code
Defensive Hardening
5/10
Making systems harder to break
Good practical defensive hardening at the application level: input validation, preflight/system checks, safe DB connection testing, and role/permission integration; improvements possible around secret handling and env-write safety.
Evidence
app/Http/Requests/Auth/LoginRequest.php: authenticate and throttleKey methods implement throttling and validation
app/Livewire/Installation/StepManager.php: runPreflightChecks, directory permission checks and safe DB testConnection
app/Http/Controllers/Api/Concerns/SafeApiQuery.php: safeSortColumn and safeOrderDirection for safer query handling
Detection & Incident Response
3/10
Spotting and handling attacks
Basic detection and operational observability patterns exist: error logging, an admin desktop error log UI, and jobs to surface issues; not a full incident response playbook or validated detection rules.
Evidence
app/Livewire/Admin/DesktopErrorLog.php: UI for viewing and exporting desktop error history
app/Livewire/Installation/StepManager.php: Log::error and Log::warning usage for installation failures
app/Jobs/UnderMaintenanceJob.php: job to orchestrate maintenance state
Compliance & Threat Modeling
2/10
Planning against threats
Some compliance-aware controls in installation and financial reporting (preflight checks, basic expense categorization and tax-related placeholders) but no formal threat models, STRIDE analysis or audit-ready compliance artefacts.
Evidence
app/Livewire/Installation/StepManager.php: preflight and environment validation steps, env update guidance
app/Actions/Finance/GenerateFinancialReportsAction.php: expense categories, tax/other_expenses handling and report structures
Verified artifacts
Expertise
Application Security• Middle
Industries
Commerce• Middle
Food & Beverages• Middle
Technologies
Cryptography
AppSec
DFIR
Recommendations
- Lead development of inventory, POS and financial-reporting features where domain knowledge matters (POS integration, invoicing, barcode generation, analytics).
- Implement security hardening workstreams: add secret scanning, avoid direct .env writes without safe backups, and integrate SAST/SCA into CI (Semgrep/Dependabot or similar).
- Develop incident response and detection artifacts: error-to-alert mapping, SIEM-friendly logs, and a small set of Sigma/OSQuery/Suricata rules for key failure modes.
- Add reproducible vulnerability analysis and regression tests when fixing runtime crashes (unit tests + small integration tests that validate self-heal behaviors).
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories: