Developer Glossary & Standards

AES is a symmetric block cipher established by NIST in 2001 that encrypts data in 128-bit blocks using 128, 192, or 256-bit cryptographic keys worldwide.

AI tokens are the fundamental atomic units of text and code processed by Large Language Models, governing pricing, context limits, and tokenization.

API Rate Limiting is a traffic management strategy that controls the rate of incoming client requests to protect server infrastructure from overload and abuse.

AVIF (AV1 Image File Format) is an open, royalty-free next-generation image file format delivering state-of-the-art compression, HDR color depth, and alpha transparency.

Base64 is a binary-to-text encoding algorithm that converts binary data into an ASCII string using 64 printable characters as defined in RFC 4648.

BLAKE2 is a high-speed, cryptographically secure hash function defined in RFC 7693 that outperforms MD5 and SHA-2 while matching SHA-3 security.

Brotli is an open-source lossless data compression algorithm developed by Google that achieves significantly higher compression ratios than Gzip for web assets.

Byte-Pair Encoding (BPE) is a subword tokenization algorithm used by LLMs like GPT-4o, Claude, and Llama to convert text and code into numeric token vectors.

C# classes and record types define typed data models in .NET. Learn how System.Text.Json, Newtonsoft.Json, attributes, and records enable robust JSON serialization.

camelCase is a compound word writing convention where each constituent word begins with a capital letter without delimiter spaces, standard in JavaScript and modern software.

Classless Inter-Domain Routing (CIDR) is an IP addressing standard (RFC 4632) utilizing variable-length prefix bitmasks to replace legacy Class A, B, and C networks.

Color spaces define mathematical models for representing and calculating colors across digital displays, including sRGB, HSL, and wide-gamut OKLCH.

Content Security Policy (CSP) is an HTTP security header that prevents Cross-Site Scripting (XSS) and data injection attacks by restricting authorized resources.

Cron is a time-based job scheduler in Unix-like operating systems configured via cron expressions specifying minute, hour, day, month, and weekday.

CORS is an HTTP-header based security mechanism enforced by web browsers to restrict cross-origin network requests from accessing sensitive server resources.

A cryptographic nonce is an arbitrary, single-use random number generated for cryptographic communications to prevent replay attacks and secure CSP scripts.

CSS is a stylesheet language used to specify the presentation, styling, and visual layout of HTML and XML documents across media types.

CSS Keyframes (@keyframes) define declarative multi-step animation timelines in CSS, enabling browser rendering engines to interpolate property transitions across percentage stops.

CSS selectors are declarative matching patterns defined by the W3C that enable browser rendering engines to bind styles and JavaScript to DOM elements.

CSV is a tabular text data format standardized in RFC 4180, representing structured spreadsheet rows and columns with comma delimiters.

cURL is a command-line tool and library (libcurl) for transferring data with URLs across HTTP, HTTPS, FTP, and dozens of network protocols.

Dart is a client-optimized, object-oriented, strongly typed programming language developed by Google, powering the Flutter multi-platform UI framework.

A diff is a data comparison algorithm and output format displaying line-by-line insertions, deletions, and modifications between text files.

DMARC is an email authentication protocol that builds upon SPF and DKIM to prevent phishing, email spoofing, and business email compromise.

DNS is a hierarchical, decentralized naming system that translates human-friendly domain names into machine-routable IP addresses.

Docker Compose is a declarative tool for defining and running multi-container Docker applications using standardized YAML service definitions.

A Dockerfile is a declarative text document containing sequential instructions used by the Docker daemon or BuildKit engine to automate container image builds.

Dotenv is a key-value configuration file convention standardized by the Twelve-Factor App methodology for injecting environment variables into application runtimes.

GitHub Actions is a declarative continuous integration and continuous delivery (CI/CD) platform integrated into GitHub that enables automated testing, building, linting, and deployment via YAML workflows.

Go structs define typed data models in Golang. Learn how struct tags, encoding/json, omitempty, and pointers enable robust JSON serialization.

GraphQL is an open-source data query and manipulation language for APIs, developed by Meta in 2012 and governed by the GraphQL Foundation.

gRPC is a high-performance open-source universal RPC framework developed by Google that leverages HTTP/2 transport and Protocol Buffers for schema-driven communication.

HAR is a JSON-formatted archive standard used by browsers and performance tools to record detailed network session logs, headers, and timings.

HMAC is a cryptographic construction combining a hash function with a secret key to verify data integrity and message authenticity per RFC 2104.

HTML is the standard markup language for creating web pages and web applications, structuring content through semantic elements and the DOM.

HTML entities are coded character strings starting with an ampersand and ending with a semicolon used to render reserved and special characters in HTML.

An ETag is an HTTP response header providing a content-based validator that allows web clients and CDNs to make efficient conditional HTTP requests (304 Not Modified).

HTTP headers are key-value metadata fields transmitted in HTTP requests and responses that govern caching, authentication, cookies, and security.

HSTS (RFC 6797) is a web security policy header that forces browsers to communicate with websites exclusively over secure HTTPS connections, preventing SSL stripping.

The IANA Time Zone Database (tzdb / Olson database) is the canonical global standard for historical and current timezone boundaries, UTC offsets, and Daylight Saving Time rules.

ISO 8601 is the international standard covering the exchange of date- and time-related data, establishing an unambiguous, lexicographically sortable date format.

Source maps map compiled, minified, or transpiled code back to its original source code, enabling debugging of TypeScript and JSX in browsers.

JSON is an open, text-based data interchange format standardized in RFC 8259, designed for human-readable and machine-parseable data transmission.

JSON Lines is a text format for storing structured data where each line is a valid JSON value, optimized for streaming and big data processing.

JSON Patch is an IETF standard (RFC 6902) format for expressing a sequence of atomic operations to modify a target JSON document.

JSON Schema is a declarative JSON dialect for annotating, validating, and establishing structural contracts for JSON documents and REST APIs.

A JSON Web Token (JWT) is a compact, URL-safe open standard (RFC 7519) used to securely transmit verifiable claims between distributed web services.

JSONPath (RFC 9535) is a standardized query language for filtering, traversing, and extracting sub-elements and values from JSON documents.

JWT claims are statements about an entity (typically a user) and additional metadata serialized as key-value pairs inside a JSON Web Token payload.

Lorem Ipsum is scrambled Latin placeholder text used in typography, graphic design, and web development to preview layouts before final copy is available.

Markdown is a lightweight plain-text formatting syntax created by John Gruber in 2004 that converts readable text into structured HTML.

MD5 is a legacy 128-bit cryptographic hash function developed by Ronald Rivest in 1991, now cryptographically broken due to collision vulnerabilities.

A merge conflict occurs in distributed version control when concurrent, divergent modifications target the same file lines or structure and cannot be resolved automatically.

Model Context Protocol is an open standard that connects AI models to external tools, databases, and local file systems via secure JSON-RPC interfaces.

NDJSON is a stream-friendly data format where each line is a self-contained JSON object, used in logging, real-time analytics, and search indexing.

OAuth 2.0 (RFC 6749) is the industry-standard authorization protocol that enables third-party applications to obtain scoped access to HTTP resources on behalf of a user.

The Open Container Initiative (OCI) is an open governance project that defines standardized specifications for container runtime formats and container image formats.

The Open Graph protocol enables web pages to become rich graph objects on social networks like Facebook, LinkedIn, Discord, and Slack using semantic meta tags.

OpenAPI is an API description format for REST APIs, establishing a vendor-neutral contract for endpoints, request parameters, and payloads.

OpenTelemetry is a CNCF open-source vendor-neutral observability framework providing standardized APIs, SDKs, and tooling to generate, collect, and export traces, metrics, and logs.

A passkey is a digital credential built on WebAuthn and FIDO2 standards that replaces passwords with synchronized, phishing-resistant asymmetric cryptographic keypairs.

Prompt caching enables Large Language Models to reuse pre-computed attention states across API requests, cutting input costs by 50% to 90% and reducing latency.

Prompt engineering is the practice of structuring, refining, and designing inputs for Large Language Models to maximize accuracy, consistency, and alignment.

Prompt injection is an AI security vulnerability where untrusted inputs subvert system instructions, leading to data exfiltration, jailbreaks, or unauthorized tool calls.

PKCE (RFC 7636) is an OAuth 2.0 security extension that protects public and confidential clients against authorization code interception attacks using SHA-256 challenges.

Protocol Buffers is Google's language-neutral, platform-neutral binary serialization mechanism for serializing structured data efficiently.

A PTR record (Pointer Record) is a DNS resource record used in reverse DNS lookups to map an IPv4 or IPv6 address back to a hostname or FQDN.

A Progressive Web App is a web application built using modern APIs to deliver native app-like capabilities, offline support, and installability.

Pydantic is the standard data validation, serialization, and settings management library for Python, powered by a Rust core in V2.

A QR Code is a two-dimensional matrix barcode invented by Denso Wave in 1994, standardized in ISO/IEC 18004 to store machine-readable data.

A regular expression (Regex) is a sequence of characters defining a search pattern for text matching, string replacement, and robust input validation.

SHA-256 is a cryptographic hash function in the SHA-2 family that produces a unique 256-bit (32-byte) deterministic digest from any input data.

SHA-3 is the NIST FIPS 202 cryptographic hash standard based on the Keccak sponge construction, providing structural diversity from the SHA-2 family.

Semantic Versioning is a universal three-component versioning specification (MAJOR.MINOR.PATCH) that communicates breaking API changes and compatibility.

Serde is the de facto serialization and deserialization framework for Rust, enabling fast, zero-copy, compile-time data format translation.

Server-Sent Events (SSE) is an HTTP-based standard that allows servers to stream real-time text events unidirectionally over a single persistent connection.

A Service Worker is an event-driven programmable client-side network proxy running in the browser background to enable offline caching, push notifications, and background sync.

An SBOM is a formal, machine-readable inventory of software components, dependencies, libraries, and licenses that comprise a software build.

SQL is the domain-specific standard language used to query, manipulate, and manage relational database management systems (RDBMS).

An SSL/TLS certificate is a digital document (X.509 standard) that cryptographically binds a public key to an identity to enable encrypted HTTPS sessions.

A stack trace is a structured report of the active execution call stack frames generated by runtimes when an unhandled error, exception, or panic occurs.

SVG is an XML-based vector image format for defining two-dimensional graphics with interactivity, animations, and resolution independence.

A tech stack is the combination of programming languages, frameworks, libraries, databases, servers, and tooling used to build and run web applications.

TOML is a minimal, human-readable configuration file format engineered for unambiguous semantics and direct mapping to hash tables.

Transport Layer Security (TLS) is the standard cryptographic protocol that encrypts and authenticates internet communications across HTTPS, WebSockets, and APIs.

Tree shaking is a static analysis optimization in JavaScript bundlers that eliminates unused exports from the final production bundle to reduce file size.

Two's complement is the standard binary encoding scheme used by modern computer hardware to represent signed negative and positive integers.

TypeScript is a strongly typed, object-oriented superset of JavaScript developed by Microsoft that compiles to clean, readable JavaScript across any runtime.

A UUID is a 128-bit identifier standardized in RFC 9562 that provides guaranteed uniqueness across distributed computer systems without central coordination.

A ULID is a 128-bit lexicographically sortable, URL-safe identifier encoded in 26 Crockford Base32 characters with millisecond timestamp precision.

A Unix timestamp represents elapsed seconds since the Unix Epoch (January 1, 1970 00:00:00 UTC), serving as the universal standard for date-time representation.

URL encoding (percent-encoding) is an RFC 3986 mechanism that converts reserved or unsafe characters in a URI into a percent sign followed by two hex digits.

The viewport represents the visible polygonal viewing area in web browsers, governing CSS layout dimensions, media query breakpoints, and responsive rendering.

WebAuthn is a browser API that enables public-key cryptographic authentication, powering phishing-resistant passwordless sign-ins and passkeys.

WebAssembly is a portable, low-level binary code format that executes at near-native speed inside web browsers, Node.js, and serverless edge runtimes.

A webhook is an event-driven HTTP callback mechanism that sends real-time automated payloads between web systems when specific triggers occur.

WebP is an open-standard raster image format developed by Google providing superior lossy and lossless compression with alpha transparency for web graphics.

WebSocket is a persistent, bidirectional, full-duplex communication protocol operating over a single TCP connection, initiated via an HTTP/1.1 Upgrade handshake.

WHOIS is a query and response protocol used to lookup registered domain owners, registrar details, nameservers, and expiration dates.

XML is a flexible, tag-based markup language standardized by the W3C for storing and transporting structured, machine-parseable hierarchical data.

YAML is a human-readable data serialization language commonly used for configuration files, Kubernetes manifests, and CI/CD pipelines.

Zod is a TypeScript-first schema declaration and validation library that ensures runtime boundary safety with automatic static type inference.