Next.js had a security vulnerability scare last week due to an internal header in its middleware that allowed for skipping middleware (like auth validation) before reaching routes. The Next.js team responded quickly and patched the security holes, but this serves as a reminder to stay vigilant, keep dependencies updated, and implement multiple layers of security.

Michael Jackson, co-founder of Remix and React Router, is calling it quits for Remix support React Server Components. Lots of React-based frameworks built prior to RSCs have been struggling to support the new paradigm shift - and lots of devs have bemoaned the fact because of the added complexity it introduces, and MJ is over it. This isn’t the first time framework authors have made bold claims to not support new breaking changes, so we’ll have to wait and see if he sticks to it.

Rsdoctor, a build analyzer tool by ByteDance, has hit v1.0. Rsdoctor goes beyond other build analysis tools offering a visual view of the build process and smart analysis to help dev teams identify bottlenecks, optimize performance, and improve overall engineering quality.

News:

Bonus News:

Fire Starters:

CSS interpolate-size: allow-keywords

What Makes Us Happy this Week:

Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.

Next.js’s Security Vulnerability, Remix Walks Away from RSCs, and Rsdoctor 1.0

Front-End Fire

Next.js’s Security Vulnerability, Remix Walks Away from RSCs, and Rsdoctor 1.0