Available for internships, freelance work & collaboration

Building practical software with intent.

I am Mathew Gerald Chukwudera, a Software Engineering student who builds secure web platforms and thoughtful systems software for real-world workflows.

Explore selected work Email me

FocusFull-stack & systems

Based inOwerri, Nigeria

Status3rd Year, B.Tech

MGC / 2026

C++20TYPESCRIPT

FULL-STACK WEBREACT

NODE.JSREST APIS

SECURE AUTHPOSTGRESQL

SQLITECONTAINERS

CLOUDFLAREGIT

LINUXJAVASCRIPT

01 / PROFILE

A careful approach to useful technology.

I am pursuing a B.Tech in Software Engineering at the Federal University of Technology, Owerri, with an expected graduation year of 2029. My work moves comfortably between polished web interfaces, backend services, and systems-level programming.

I enjoy turning complex, everyday processes into software people can trust: defining the workflow, securing the data, and refining the details that make a product feel reliable.

Build for the workflow

Software should make the next action clear, not add friction.

Take security seriously

Authentication, data boundaries, and validation belong in the foundation.

Stay technically curious

From modern C++ to web infrastructure, I keep extending the range of problems I can solve.

02 / SELECTED WORK

Projects built around real operational needs.

Five featured builds across PostgreSQL query tooling, education technology, computer-based testing, security tooling and flight reservations.

01Library / Open source

pg-fluent

A Supabase-style fluent query builder, in the postgrest-js contract, that compiles to a single parameterized SQL statement and runs directly against PostgreSQL over the wire protocol.

Reuses the upstream postgrest-js builder, so the request and response shape matches supabase-js exactly, but the request is intercepted, translated to parameterized SQL and executed through node-postgres - keeping the ergonomics while dropping the HTTP hop and JSON re-serialization.
A CLI generates TypeScript types straight from a live schema, so selected columns are type-checked end to end.
A differential test suite runs the same queries through pg-fluent and PostgREST and asserts identical results, with every expected difference documented.
Ships with benchmarks, structured data-and-error results, LISTEN/NOTIFY, GeoJSON responses and observability hooks.

TypeScriptPostgreSQLnode-postgresNode.js

View on GitHub View on npm

02Web platform / Production

Sherman Nagel Result Portal

Role-based school result infrastructure where teachers enter scores, administrators manage academic records, students redeem secure scratch-card PINs, and anyone can verify a printed result.

Secure staff access with JWT cookies, bcrypt, optional TOTP 2FA, account lockout, and session revocation.
Built for the full result lifecycle: score entry, publishing, analytics, scratch cards, CSV export, guardian emails, and QR verification.
Publication-safe placement: a class or arm change that would rewrite already-published results is blocked until the principal explicitly confirms it.
Transactional end-of-session promotion that reports every student it could not place (missing or unmapped class) instead of silently skipping them.

React 18ViteNode.jsExpressSupabaseCloudflare

Visit live portal

03Web platform / Production

Sherman Nagel CBT Portal

A computer-based test platform run for the school's entrance aptitude test, carrying candidates from PIN sign-in through timed subject papers to published results, and built to grow into a full in-school CBT system.

Candidates sign in with an Exam ID and PIN and see only their assigned subjects, while scoped admin accounts manage candidates, questions, schedules and results.
The exam engine runs timed, shuffled attempts, records violations as they happen, sweeps expired sessions automatically, and grants controlled retakes and rewrites with an audit trail.
A question bank with single and bulk entry, per-subject schedules, and 12 related tables covering candidates, attempts, answers and violations across 28 API endpoints.
Result sheets and CSV export with flag resolution, backed by CSPRNG-generated exam PINs, password policy checks, account lockout, and JWT sessions.

React 18ViteNode.jsExpressSupabaseCloudflare

Visit live portal

04Systems / CLI

GitHub Secrets Watcher

A command-line security tool that scans GitHub repositories (public and private, with a token) for environment and configuration files accidentally committed in Git history, and reports them without modifying anything.

A fast history walker diffs each commit against its first parent, so scanning cost scales with what changed, not depth times tree size; deleted files are traced back to the commit that last contained them, and content is probed so likely-secret files are ranked above name-only matches.
Persistent bare-clone cache with incremental fetches cuts repeat full-history scans to just a fetch of new commits, and an opt-in early-exit heuristic skips quiet stretches of history.
Multi-threaded scanning with an optional GitHub token for higher rate limits and private access, and a history depth that defaults to the entire reachable history.
Reports each finding with a validated, URL-encoded link to the exact commit in text, JSON (with per-repo scan stats), or CSV - read-only everywhere, it never edits a repository.

C++20libcurlJSONGitANSI Colors

View on GitHub

github-secrets-watcher

> github_secrets_watcher scan --username Gerald-Mathew

> [INFO] Found 7 public repositories to scan.

> [INFO] History depth: all commits (cached)

> Repository: StudySync

> Found 2 potential environment files:

> client/assets/js/config.js [LINK]

> server/src/config [LINK]

SECURITY TOOL / 004

05Systems / CLI

Flight Reservation System CLI

A command-line reservation system for a fictional Nigerian airline, written in C++20 named modules, covering accounts, cabins, persistence and live payments.

Customer and admin roles plus a protected super-admin account, with flight management across 21 Nigerian airports and automatic status updates driven by the system clock.
Economy, Business and First-Class cabins with window/aisle awareness, per-seat ownership, booking and a 30-minute cancellation window with conflict prevention.
Account wallet with deposits, withdrawals, transfers, loyalty points and a full transaction history, all backed by a single SQLite database.
Argon2id password hashing with per-password salts and constant-time verification, plus a live Paystack payment flow whose references cannot be reused.

C++20 ModulesSQLiteArgon2idPaystack API