The Matlab Blog

Insights on building great software

Engineering, design, DevOps, and product playbooks from the team behind 600+ shipped projects. New articles published regularly.

Server Components vs Client Components: the mental model that actually sticks

Frontend

September 4, 202618 min read

Server Components vs Client Components: The Mental Model That Actually Sticks

How the RSC boundary works: two module graphs, what crosses through imports and props, and the errors that name the rule you broke.

Supabase

September 3, 20269 min read

Fetching Only What You Need: SELECT * vs Explicit Columns in Supabase

Learn how SELECT * works in Supabase, why extra columns grow JSON and network cost, and when to select only the fields your UI needs.

Mobile

September 3, 202629 min read

Mobile App Release Pipelines: Signing, Store Review, Staged Rollouts, and Forced Upgrades

A practical guide to Android and iOS releases: signing, AAB and IPA uploads, store review, staged rollouts, and forced upgrades.

Supabase

September 2, 20269 min read

Supabase RLS: Preventing Authorization Bugs That Look Like Database Bugs

Learn how Supabase RLS works, why queries return no data, and how to create, debug, and secure Row Level Security policies in PostgreSQL.

How email actually works: the path from an application through SMTP, DNS and MX to inbox, spam or reject

Security

September 2, 202636 min read

How Email Actually Works: SMTP, DNS, SPF, DKIM, DMARC, MX, Bounces, and Deliverability

Learn how email works from send to inbox, including SMTP, DNS and MX records, SPF, DKIM, DMARC, ARC, bounces, queues, and deliverability.

Supabase

September 1, 20268 min read

Supabase Query Optimization: From Slow Query to Root Cause

How to find and fix slow Supabase queries using EXPLAIN ANALYZE, pg_stat_statements, indexes, and RLS-aware query patterns, a step-by-step guide.

Supabase

September 1, 202616 min read

Handling Race Conditions in Supabase Applications

Prevent Supabase race conditions with transactions, isolation levels, row and advisory locks, optimistic locking, and unique constraints.

Supabase

August 31, 202616 min read

Pagination at Scale in Supabase: Offset vs Cursor-Based Pagination

Offset vs cursor-based pagination in Supabase: performance at scale, the indexes each needs, pagination drift, and when to use which.

Two identical retried requests collapsing through a unique key check into a single stored result instead of two duplicate database writes

Supabase

August 31, 202614 min read

Designing Idempotent Operations with Supabase: Retries, Webhooks, and Queues

How to make Supabase writes safe to retry: idempotency keys, ON CONFLICT DO NOTHING, deduping Stripe webhooks, and idempotent pgmq queue consumers.

Supabase

August 30, 202611 min read

Observability for Supabase Applications: What Should You Actually Monitor?

The five signals worth watching in Supabase — CPU, connections, slow queries, error rate, response time — and when to add Grafana or Datadog.

Database indexing: types, performance trade-offs, and write amplification

Databases

August 30, 20269 min read

Database Indexing Deeply: Types, Trade-offs, and Write Amplification

Learn database indexing, including B-Tree, Hash, Composite, Unique, Partial, and Covering indexes, their performance trade-offs, and write amplification.

Supabase

August 29, 202616 min read

When Supabase Should Not Be Your Entire Backend

Learn when a Supabase backend is enough and when you may need a separate backend for complex business logic, external services, and heavy tasks.

Illustration representing an AWS Lambda cold start — the latency penalty of building a fresh execution environment before running function code

Architecture

August 29, 202614 min read

AWS Lambda Cold Starts: Mitigation and Trade-offs

How AWS Lambda cold starts work, what they cost since the 2025 INIT billing change, and how to cut them with SnapStart, provisioned concurrency and design.

Supabase

August 28, 202617 min read

Supabase Storage: Secure File Uploads, Buckets, Policies, and Signed URLs

Set up Supabase Storage for production: private buckets, RLS policies on storage.objects, secure uploads, and signed URLs for private files.

Supabase

August 28, 202613 min read

Supabase Edge Functions vs Backend: When Should You Use Each?

Learn when Supabase Edge Functions are enough for webhooks and server logic, and when you still need a traditional backend. A guide for React developers.

Supabase

August 27, 202622 min read

Supabase RLS at Scale: When Row-Level Security Becomes a Performance Problem

Why Supabase RLS policies get slow past a few hundred thousand rows, how to spot it with EXPLAIN ANALYZE, and the indexing and caching fixes that work.

Supabase

August 27, 20268 min read

Supabase Edge Functions: Handling Retries, Timeouts, and Partial Failures

Learn how to handle retries, timeouts, and partial failures in Supabase Edge Functions with practical TypeScript examples.

Supabase

August 26, 202612 min read

Supabase Realtime: Building Real-Time Applications with PostgreSQL Changes

How Supabase Realtime streams Postgres changes, broadcasts and presence over one WebSocket, with setup, channel patterns and scaling notes.

Supabase

August 26, 202617 min read

Supabase Edge Functions + Queues: Moving Heavy Work Out of the Request Path

Move slow work off the request path with Supabase Queues and pgmq: enqueue in milliseconds from an Edge Function and drain the job with a worker.

Supabase

August 25, 202616 min read

Supabase RLS: Building Secure Multi-Tenant Applications with Row-Level Security

A production guide to multi-tenant SaaS on Supabase RLS: schema design, policies, JWT tenant claims, and the mistakes that leak data between tenants.

Supabase

August 25, 202613 min read

Supabase Connection Pooling: Solving Database Connection Exhaustion in Serverless Systems

How Supabase connection pooling and Supavisor prevent PostgreSQL connection exhaustion in serverless apps: setup, pooling modes, and best practices.

Supabase

August 24, 20268 min read

How to Integrate Supabase with Web, Android, and iOS Applications

Learn how to integrate Supabase with React, Next.js, React Native, native iOS, and Android apps with practical setup steps, code examples, and best practices.

Supabase

August 24, 202612 min read

Supabase as a Backend: Where Should Business Logic Actually Live?

Learn where business logic should live in a Supabase application, including PostgreSQL, RLS, database functions, Edge Functions, and application backends.

Supabase

August 23, 202610 min read

Supabase in Production: Performance, Security, Backups, and Scaling

How to run Supabase in production: performance tuning, security with RLS, backup strategies, and scaling for real-world applications.

Supabase

August 23, 202616 min read

Supabase Authentication: Sessions, Refresh Tokens, OAuth, and Secure Auth Flows

How Supabase auth works in production: session and refresh token lifecycle, PKCE OAuth in Next.js, and the errors behind random logouts.

Supabase

August 22, 202611 min read

Supabase Fundamentals: Database, PostgreSQL, Projects, and Core Features

Supabase runs on PostgreSQL. Learn how databases, relational tables, and core features like Auth, Storage and Realtime work together.

Supabase

August 22, 20265 min read

Soft Delete vs Hard Delete: Designing Data Lifecycle in Supabase

When to soft delete and when to hard delete in Supabase: the is_deleted pattern, deleted_at timestamps, filtering queries, and restoring records.

Engineering

January 14, 20267 min read

How to choose the right tech stack for your startup

The stack you pick on day one shapes how fast you can move on day 100. Here is a practical framework for deciding — without over-engineering or painting yourself into a corner.

A person using a mobile app on a smartphone

Design

January 9, 20266 min read

Designing mobile apps people actually keep on their phones

Retention starts in the first five minutes. We break down the onboarding and design patterns that keep users coming back instead of uninstalling on day one.

Code on a screen representing a deployment pipeline

DevOps

January 2, 20268 min read

Shipping faster without breaking things: our CI/CD playbook

A look inside the pipelines, checks, and habits that let our teams deploy multiple times a day with confidence — and roll back in seconds when something slips through.

Let's Collaborate

Tell us about your project and we'll come back with a plan, a timeline, and a quote.

Services

Technologies

Industries

Company

Insights on building great software

Server Components vs Client Components: The Mental Model That Actually Sticks

Fetching Only What You Need: SELECT * vs Explicit Columns in Supabase

Mobile App Release Pipelines: Signing, Store Review, Staged Rollouts, and Forced Upgrades

Supabase RLS: Preventing Authorization Bugs That Look Like Database Bugs

How Email Actually Works: SMTP, DNS, SPF, DKIM, DMARC, MX, Bounces, and Deliverability

Supabase Query Optimization: From Slow Query to Root Cause

Handling Race Conditions in Supabase Applications

Pagination at Scale in Supabase: Offset vs Cursor-Based Pagination

Designing Idempotent Operations with Supabase: Retries, Webhooks, and Queues

Observability for Supabase Applications: What Should You Actually Monitor?

Database Indexing Deeply: Types, Trade-offs, and Write Amplification

When Supabase Should Not Be Your Entire Backend

AWS Lambda Cold Starts: Mitigation and Trade-offs

Supabase Storage: Secure File Uploads, Buckets, Policies, and Signed URLs

Supabase Edge Functions vs Backend: When Should You Use Each?

Supabase RLS at Scale: When Row-Level Security Becomes a Performance Problem

Supabase Edge Functions: Handling Retries, Timeouts, and Partial Failures

Supabase Realtime: Building Real-Time Applications with PostgreSQL Changes

Supabase Edge Functions + Queues: Moving Heavy Work Out of the Request Path

Supabase RLS: Building Secure Multi-Tenant Applications with Row-Level Security

Supabase Connection Pooling: Solving Database Connection Exhaustion in Serverless Systems

How to Integrate Supabase with Web, Android, and iOS Applications

Supabase as a Backend: Where Should Business Logic Actually Live?

Supabase in Production: Performance, Security, Backups, and Scaling

Supabase Authentication: Sessions, Refresh Tokens, OAuth, and Secure Auth Flows

Supabase Fundamentals: Database, PostgreSQL, Projects, and Core Features

Soft Delete vs Hard Delete: Designing Data Lifecycle in Supabase

How to choose the right tech stack for your startup

Designing mobile apps people actually keep on their phones

Shipping faster without breaking things: our CI/CD playbook

Let's Collaborate