Showcase: My first web applications (IT Asset Management, B2B Procurement, Offline PWA) - Looking for feedback!

[JimmyAlter]

Hi everyone!

I am an IT Support Specialist transitioning into Full Stack Development, and I've recently finished and deployed my first web applications. My primary goal was to build practical, real-world tools for IT operations and systems administration, with a focus on security-first architecture.

I have deployed all frontends on Vercel and the backends on Render, and I've open-sourced all codebases on GitHub. I would love to share them with the community and get your feedback and advice on how to improve them!

Here is what I've built:

1. 📊 AssetDesk — IT Asset Management & Service Desk

A lightweight workspace to track corporate hardware inventory, handle support tickets, and manage user directories.

• Live Demo (Vercel): https://assetdesk-demo.vercel.app
• GitHub Repository: https://github.com/JimmyAlter/AssetDesk
• Architecture & Security: Built with React 19, Vite 8, Node.js, and SQLite. It features a hybrid design: if no live API URL is configured, it falls back to a browser-based database mock using LocalStorage so users can interact with it instantly. The backend is hardened with Helmet security headers, request body size limits, and login rate-limiting.

🛒 2. CommerceSuite — B2B Procurement Portal

An administrative portal for purchasing corporate IT hardware, licenses, and tracking orders.

• Live Demo (Vercel): https://commercesuite-demo.vercel.app
• GitHub Repository: https://github.com/JimmyAlter/CommerceSuite
• Architecture & Security: Uses React and Express. Supports role-based access (buyer vs admin workflows) and order status tracking. Just like AssetDesk, it runs in client-side LocalStorage simulator mode by default but connects to a live persistent backend on Render when configured.

🔐 3. Helper — Secure Offline RSA Token Generator (PWA)

A Progressive Web App designed for field technicians to cryptographically sign repair tokens in remote zones without internet signal.

• Live App (Vercel): https://helper-ten-pi.vercel.app
• GitHub Repository: https://github.com/JimmyAlter/helper
• Architecture & Security: 100% offline-ready static PWA using Service Workers and browser-native Web Crypto API. To keep keys safe, the private key is stored locally in localStorage and never sent over the network. It features local rate-limiting lockout (60s block after 5 failed password attempts) and secure DOM rendering to prevent XSS.

---

💬 What I'd Love Feedback On:

Since these are my first complete applications, I would appreciate any opinions or advice on:

1. Code Structure & React Best Practices: Is my component structure logical? (I recently modularized the CommerceSuite frontend from a single file).
2. Security Implementations: Are there other client-side or backend security concerns (SQL injection, XSS, authentication flows) that I should address?
3. Database & Deployment: How do you handle SQLite database persistence on free-tier providers? (Currently, I'm using Render's ephemeral storage, which resets to clean seed data on dyno restart—which I find convenient for public demo safety).
4. UI/UX: Any design changes or additional features that would make these tools more useful for IT support teams?

• GitHub Profile: https://github.com/JimmyAlter
• Portfolio: https://thiagolangone.vercel.app

Thank you so much in advance for your time and feedback!

[github-actions[bot]]

Thank you for your interest in contributing to our community! We currently only accept discussions created through the GitHub UI using our provided discussion templates. Please re-submit your discussion by navigating to the appropriate category and using the template provided.

This discussion has been closed because it was not submitted through the expected format. If you believe this was a mistake, please reach out to the maintainers.