I'm a software engineer in Kolkata who builds and ships real software: client products deployed end to end, agentic AI tooling, and small, well-tested fixes to the open-source projects millions of developers depend on.
I like problems where correctness matters: a regex that goes super-linear, a log encoder that corrupts the next event, a credential validator that accepts a proof it shouldn't.
- 📈 Intern – Quant at Futures First, Kolkata (Sep 2026 – present)
- 🚀 Forward Deployment Engineering Intern at UrsDigitally (Nov 2025 – Oct 2026): built, deployed and hosted client web apps, partner portals and mobile back ends, from first commit to production VPS
- 🏅 Selected as Specialist Programmer (SP) at Infosys through the 2026 national hiring process
- 🌱 Open source on the side: Linux desktop (Ubuntu), Python, Go and the JavaScript tooling ecosystem
 CPython |
#156474 interpreter: don't specialize LOAD_ATTR_MODULE for module subclasses, so data descriptors aren't bypassed (approved by Mark Shannon) |
 Node.js |
#61951 esm: avoid a super-linear regex when parsing data: URL MIME types#62009 doc: clarify the SQLite bare named-parameter default#62010 doc: mention the constructor check in deepStrictEqual
|
 Spring Boot |
#51156 Structured logging: a failed JSON encode no longer corrupts the next log event on the same thread (fix + regression tests)#51372 Support provided-scope libraries when extracting an executable war |
Spring Security |
#19477 Differentiate Forwarded and X-Forwarded-* headers in the proxy docs |
 Ubuntu |
app-center #2217 allow installing updates from local .deb filesyaru.dart #1100 accessibility: avoid duplicate tab stops in toggle list tiles |
 Beckn ONIX |
#895 vcvalidator: reject a Data Integrity proof with no verificationMethod (the open protocol behind ONDC) |
 MONAI |
#8753 Clearer error messages in the image writers (medical-imaging AI framework) |
🕒 Currently in review: Ubuntu, CPython, Go, VS Code, Fastify, Elastic and more
| Project | Pull request |
|---|---|
| Ubuntu App Center | #2192 show progress while the deb search loads |
| CPython | #156828 finalize the external-entity parser in xml.sax |
| Go | #81167 crypto/ecdsa: add text marshaling for keys |
| VS Code | #297032 SCM: allow wider diff decoration gutters |
| Fastify | #6526 types: send() accepts PromiseLike · #6936 observe rejection of a dropped payload |
| Spring Security | #19552 · #19607 |
| Grafana k6 | #6610 report gzip finalization errors (approved) |
| Node.js · Git · Elastic · TypeScript site · pylint | #62011 (approved) · git #2210 · #422 (approved) · #3514 · #11190 |
| Project | What it is |
|---|---|
| exposure-check | Is your site serving its .env to the internet? Zero-dependency CLI + GitHub Action that finds exposed .env files, .git folders, keys and backups after every deploy |
| VaultX | Local-first encrypted secrets vault and SSH identity manager CLI in Rust (Argon2id + AES-256-GCM), 1.7k+ npm downloads |
| PassiveCaptcha | Invisible ML CAPTCHA: bot detection from mouse dynamics with an RF + XGBoost + LSTM ensemble and SHAP explanations |
| Synapse · live | Plain-English idea → task plan, generated codebase and GitHub repo (FastAPI + Gemini), with community contributors |
Contributions welcome: each repo has good first issues.
| Project | What it is | Stack |
|---|---|---|
| WebMaster | Agentic automation control plane that drives browser and Linux desktop actions over WebSockets, choosing between the accessibility tree, input synthesis and the shell per action for latency and token cost, with state verification and retries | WebSockets · agentic AI · Linux |
| SkeoTrace · live | Farm-to-fork traceability with a tamper-evident hash-chain ledger, QR codes and role-based dashboards | TypeScript |
| MeshGrid · live | Multiplayer line-strategy game | JavaScript |
| Audacity | Real-time voice cloning | Python |
| Churn | Explainable churn prediction with a SHAP dashboard | Python · XGBoost · Streamlit |
| Digilexai | Legal document generation and analysis with LLMs | Next.js · MongoDB |
| MelomV | Emotion-aware music player (CNN + gestures) | Python · OpenCV · TensorFlow |
Also: agentic AI systems and LLM integration · OWASP and application security · SSL/TLS, PM2 and VPS hosting · Burp Suite and Wireshark
- GSSoC 2025: open-source project admin
- Languages: English · Hindi · Bengali · French (conversational)
Open to software engineering roles, remote or in Kolkata · skdas5405@gmail.com