Developed a centralized URL validation module for the roc-lang/roc repository, focusing on secure URL handling within the toolchain. The work introduced a new validation function in Zig that enforces a policy restricting HTTP package URLs to localhost variants and allowing only HTTPS URLs elsewhere. By refactoring and updating relevant backend code paths to use this logic, the changes improved maintainability, testability, and auditability of URL handling. This approach established a consistent, centralized URL policy, enhancing the project’s security posture and compliance readiness. The implementation demonstrated attention to security best practices and backend development principles using Zig as the primary language.