This page is laid out to print as a single-page PDF. Use your browser's print dialog and choose “Save as PDF” — the site navigation, footer and this notice are all removed from the printed output.

Dipendra Upreti

Contract Software Engineer · Nepal · Asia/Kathmandu

https://dipendraupreti.com.np · https://dipendraupreti.com.np/contact

Capability

Contract software engineering across three lines: building new web and mobile products including AI, LLM and MCP integration; root-cause debugging, performance work and code review in codebases written by other people; and running the infrastructure underneath both — CI/CD, cloud and edge deployment, cost and architecture review, and ongoing maintenance. Work is delivered as fixed-scope statements of work into the client's own repositories.

Core competencies

Bug fixing · Debugging · Code review · Architecture consultation · Web development · App development · AI & LLM integration · Legacy modernization · DevOps · Infrastructure maintenance

Technical stack

TypeScript, JavaScript, Python, Node.js, Fastify, Express, React.js, Next.js, GraphQL, PostgreSQL, MongoDB, Redis, Prisma, Docker, GitHub Actions, AWS, Cloudflare, Stripe, React Native, OpenAI API, LLM & RAG integration, MCP

Engagement & commercial

Contracting: Fixed-scope statement of work against a mutual services agreement. An hourly figure is supplied where a procurement form requires one, but the engagement is priced and delivered as a scoped deliverable.
Rate: $30 USD/hr · $25 USD/hr ongoing · 1 hour minimum
Payment terms: Net 30 from invoice date, or 50% on signature and 50% on a named date.
Reply: Within 4 hours
Estimate: Within one business day
RFI / RFP response: 5 business days

Vendor & security posture

Legal form: Individual contractor, no registered entity
US tax form: W-8BEN
Insurance: None currently in force
Attestation: None held · VSA-Core completed in 2 business days
Subprocessors: Cloudflare, Stripe, Cal.com, Telegram Messenger — published at https://dipendraupreti.com.np/security
References: Not currently offered

Access model

Work happens in your infrastructure and your repository — you hold the asset from the first commit.
No standing production credentials. Access is requested per task, scoped to the task, and revoked when it closes.
Read-only access wherever read-only is sufficient, which is most diagnostic work.
No client production data is copied onto local machines. Reproduction uses synthetic or redacted fixtures.
No sub-contracting. The person you talk to is the person who writes the code.
Access is enumerated in writing before work starts, so it can be reviewed and revoked as one list.

Past performance

No client engagements are published yet. The inspectable substitute is this site itself: a production Cloudflare Worker running Next.js and Prisma against D1, Stripe with 3-D Secure and an append-only payment ledger, and a live MCP server at https://mcp.dipendraupreti.com.np/mcp whose 9-tool manifest is contract-tested in CI. Implemented security controls, each naming the file that implements it, are published at https://dipendraupreti.com.np/security.

Representative packaged engagements

Bug investigation & fix From $150 · Performance audit From $250 · PR & code review From $100 · Debug retainer From $500/mo · Web app development From $1,000 · Mobile app development From $2,500 · AI & agent integration From $1,500 · Legacy rescue & modernization From $1,200 · DevOps & infrastructure From $300 · Cloud cost & architecture review From $400 · Maintenance & care plan From $250/mo. Full catalogue and terms at https://dipendraupreti.com.np/services.

Capability

Engagement & commercial

Contracting

Fixed-scope statement of work against a mutual services agreement. An hourly figure is supplied where a procurement form requires one, but the engagement is priced and delivered as a scoped deliverable.

Rate

$30 USD/hr · $25 USD/hr ongoing · 1 hour minimum

Payment terms

Net 30 from invoice date, or 50% on signature and 50% on a named date.

Within 4 hours

Estimate

Within one business day

RFI / RFP response

5 business days

Vendor & security posture

Legal form

Individual contractor, no registered entity

US tax form

W-8BEN

Insurance

None currently in force

Attestation

None held · VSA-Core completed in 2 business days

Subprocessors

Cloudflare, Stripe, Cal.com, Telegram Messenger — published at https://dipendraupreti.com.np/security

References

Not currently offered

Access model

Work happens in your infrastructure and your repository — you hold the asset from the first commit.

No standing production credentials. Access is requested per task, scoped to the task, and revoked when it closes.

Read-only access wherever read-only is sufficient, which is most diagnostic work.

No client production data is copied onto local machines. Reproduction uses synthetic or redacted fixtures.

No sub-contracting. The person you talk to is the person who writes the code.

Access is enumerated in writing before work starts, so it can be reviewed and revoked as one list.

Past performance

Representative packaged engagements